Open Policy Agent Denial of Service Vulnerability

Open Policy Agent is a general-purpose policy engine that enables unified, context-aware policy enforcement across the stack. v0.39.0 of Open Policy Agent is vulnerable to a denial-of-service vulnerability that stems from an application misinterpreting each expression, triggering out-of-scope memory access. An attacker could exploit this vulnerability to cause a denial of service (DoS).