VDB
GO-2025-3660
GO-2025-3660
PUBLISHED
OPA server Data API HTTP path injection of Rego in github.com/open-policy-agent/opa
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | zarf | * |
| chainguard | kyverno-1.14 | 0 |
| chainguard | policy-controller | 0 |
| chainguard | kyverno-notation-aws | 0 |
| wolfi | zot | * |
| wolfi | tfsec | 0 |
| chainguard | cosign-fips | 0 |
| chainguard | elastic-agent | * |
| chainguard | zot | * |
| wolfi | zarf | * |
| chainguard | cosign | 0 |
| chainguard | spire-server | 0 |
| chainguard | kyverno-notation-aws-fips | 0 |
| wolfi | conftest | 0 |
| chainguard | kubescape | * |
| chainguard | spire-server-fips | 0 |
| chainguard | trivy | 0 |
| wolfi | kubescape | * |
| chainguard | tfsec | 0 |
| github.com | open-policy-agent/opa | 0 |
…and 20 more
Timeline
- May 5, 2025 CVE Published
- Feb 4, 2026 CVE Updated