github.com/open-policy-agent/opa vulnerabilities
CVEs whose affected-version data names the github.com/open-policy-agent/opa package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2025-46569HighOPA server Data API HTTP path injection of Rego
OPA server Data API HTTP path injection of Rego
▾ Twilightopen-policy-agent · github.com/open-policy-agent/opa/v1/serverEPSS 0.51%via OSV
CVE-2022-33082High· 7.5PoCDenial of service in Open Policy Agent
Denial of service in Open Policy Agent
▾ Midnightopen-policy-agent · github.com/open-policy-agent/opaEPSS 1.7%via OSV