CVE-2022-28946
An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denia...
Summary
Out of bounds memory access in github.com/open-policy-agent/opa
Original description
The description as published by the source.
An issue in the component ast/parser.go of Open Policy Agent v0.39.0 causes the application to incorrectly interpret every expression, causing a Denial of Service (DoS) via triggering out-of-range memory access.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
github.com/open-policy-agent/opa
[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.40.0"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- web github.com
- web pkg.go.dev