{"id":"CGA-m9cq-m6g3-7493","modified":"2026-07-17T19:10:17.561519954Z","published":"2025-10-30T19:30:24Z","upstream":["CVE-2022-33082","GHSA-2m4x-4q9j-w97g","GO-2022-0574"],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33082"},{"type":"WEB","url":"https://github.com/open-policy-agent/opa/issues/4761"},{"type":"WEB","url":"https://github.com/open-policy-agent/opa/issues/4762"},{"type":"WEB","url":"https://github.com/open-policy-agent/opa/pull/4701"},{"type":"WEB","url":"https://github.com/open-policy-agent/opa/commit/064f6168a8dfebdeb2ea147f7882bb9f5d2b7f67"},{"type":"PACKAGE","url":"https://github.com/open-policy-agent/opa"},{"type":"WEB","url":"https://github.com/open-policy-agent/opa/blob/598176de326025451025225aca53e85708d5f1db/ast/compile.go#L1224"},{"type":"WEB","url":"https://pkg.go.dev/vuln/GO-2022-0574"}],"affected":[{"package":{"name":"opa","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/opa?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.64.1-r1"}]}],"ecosystem_specific":{"components":[{"component_type":"go-module","component_location":"/usr/bin/opa","component_purl":"pkg:golang/github.com/open-policy-agent/opa@v0.0.0-20240426182043-298f97d79da3","latest_event_status":"fixed","latest_event_timestamp":"2024-05-09T13:26:43Z","architecture":"aarch64","component_name":"github.com/open-policy-agent/opa","component_version":"v0.0.0-20240426182043-298f97d79da3"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m9cq-m6g3-7493.json"}},{"package":{"name":"opa","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/opa?arch=aarch64"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.64.1-r1"}]}],"ecosystem_specific":{"components":[{"component_type":"go-module","component_location":"/usr/bin/opa","component_purl":"pkg:golang/github.com/open-policy-agent/opa@v0.0.0-20240426182043-298f97d79da3","latest_event_status":"fixed","latest_event_timestamp":"2024-05-09T13:26:43Z","architecture":"aarch64","component_name":"github.com/open-policy-agent/opa","component_version":"v0.0.0-20240426182043-298f97d79da3"}]},"database_specific":{"source":"https://advisories.cgr.dev/chainguard/v3/osv/CGA-m9cq-m6g3-7493.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"}]}