CVE-2022-33082

Description

An issue in the AST parser (ast/compile.go) of Open Policy Agent v0.10.2 allows attackers to cause a Denial of Service (DoS) via a crafted input.

References

https://github.com/advisories/GHSA-2m4x-4q9j-w97g

https://github.com/open-policy-agent/opa/blob/598176de326025451025225aca53e85708d5f1db/ast/compile.go#L1224

Details

Source: Mitre, NVD

Named Vulnerability: GO-2022-0574Named Vulnerability: GHSA-2m4x-4q9j-w97g

Risk Information

CVSS v2

CVSS v3

EPSS