{"schemaVersion":3,"id":"CVE-2024-8260","aliases":["CGA-2xpp-rwm8-785r","CGA-345q-cwvw-73r3","CGA-73w6-jwcv-37xv","CGA-7mr2-xc2h-7xjg","CGA-89hf-x5r9-3q88","CGA-8v9j-p3wq-rgw8","CGA-9rv9-qxm5-mhj2","CGA-c2f2-3vhf-5jrp","CGA-c772-8gp8-r34v","CGA-ccx3-p9p5-px39","CGA-ff4f-qp4j-5674","CGA-fgx8-mp9f-397w","CGA-gch5-x8j8-xv89","CGA-gg7m-2q46-qfxh","CGA-gj5v-fcv4-8q2r","CGA-gqcp-wq9w-g9f2","CGA-j9xh-rwpg-gvrf","CGA-jfcf-26mx-969v","CGA-jp4m-7jpr-h5h6","CGA-jqq2-67gm-8f28","CGA-pp9r-rf3m-qh9j","CGA-r4pg-mrcx-995w","CGA-r55g-mgq5-rg66","CGA-v29m-37jp-wwfv","CGA-w546-qqmp-vp4x","CGA-w797-h76r-x4vx","CGA-wccw-m4j8-c4rj","CGA-whj3-v8cg-wwhm","CGA-wphm-65pm-wf5r","CGA-wwj2-q549-x3wm","CGA-wwvv-fcv4-739r","CGA-wxm3-qxv3-57pw","CGA-x3h4-v6w8-9qjx","CGA-xvwp-44wx-rg4c","GHSA-c77r-fh37-x2px","GO-2024-3141","CGA-4vh7-q53m-wwq4","CGA-5q8g-38jp-r3cg","CGA-72p4-r784-6wwr","CGA-84hm-x5c4-2f5m","CGA-8pcc-pgvc-fqrg","CGA-fc9x-4jfg-59cj","CGA-h762-v6xr-h3rq","CGA-jp8x-5xjh-9x58","CGA-mc5p-6565-j9gq","CGA-mq64-rcpv-6qcc","CGA-rv74-26q5-jmwg","CGA-w395-gfx9-j4f6","CGA-x9jc-m7jv-hx4x","CGA-xmcr-wx98-9rm4"],"status":"published","duplicateOf":null,"title":null,"description":"A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s functions.","dates":{"published":"2024-08-30T12:22:45.964Z","modified":"2024-08-30T13:17:20.246Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.3,"severity":"high","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Wolfi","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L","exploitability":3.3,"impact":7.8,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Go","score":5.2,"severity":"medium","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Go","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L","exploitability":3.3,"impact":7.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"OSV · Chainguard","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L","exploitability":3.3,"impact":7.8,"computed":true},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":7.3,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00341,"percentile":0.26119,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.00341},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00341,"percentile":0.26119}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.00341,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.00341,"percentile":0.26119}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-294","name":"Authentication Bypass by Capture-replay","description":"A capture-replay flaw exists when the design of the product makes it possible for a malicious user to sniff network traffic and bypass authentication by replaying it to the server in question to the same effect as the original message (or with minor changes).","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/294.html"}],"affected":[{"vendor":"chainguard","product":"conftest","name":"conftest","label":"conftest","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conftest","purlType":"apk","versions":[{"text":"< 0.55.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.55.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"conftest-fips","name":"conftest-fips","label":"conftest-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/conftest-fips","purlType":"apk","versions":[{"text":"< 0.55.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.55.0-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cosign","name":"cosign","label":"cosign","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cosign","purlType":"apk","versions":[{"text":"< 2.4.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"cosign-fips","name":"cosign-fips","label":"cosign-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/cosign-fips","purlType":"apk","versions":[{"text":"< 2.4.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"k8sgpt","name":"k8sgpt","label":"k8sgpt","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/k8sgpt","purlType":"apk","versions":[{"text":"< 0.3.42-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.3.42-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kots","name":"kots","label":"kots","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kots","purlType":"apk","versions":[{"text":"< 1.117.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.117.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kots-compat","name":"kots-compat","label":"kots-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kots-compat","purlType":"apk","versions":[{"text":"< 1.117.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.117.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kots-symlink-compat","name":"kots-symlink-compat","label":"kots-symlink-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kots-symlink-compat","purlType":"apk","versions":[{"text":"< 1.117.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.117.2-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubescape","name":"kubescape","label":"kubescape","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubescape","purlType":"apk","versions":[{"text":"< 3.0.18-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.18-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opa","name":"opa","label":"opa","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opa","purlType":"apk","versions":[{"text":"< 0.68.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.68.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"policy-controller","name":"policy-controller","label":"policy-controller","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/policy-controller","purlType":"apk","versions":[{"text":"< 0.9.0-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.0-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"policy-controller-fips","name":"policy-controller-fips","label":"policy-controller-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/policy-controller-fips","purlType":"apk","versions":[{"text":"< 0.12.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.12.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"policy-controller-tester","name":"policy-controller-tester","label":"policy-controller-tester","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/policy-controller-tester","purlType":"apk","versions":[{"text":"< 0.9.0-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.0-r10","eol":null,"hubHref":null},{"vendor":"chainguard","product":"policy-controller-tester-fips","name":"policy-controller-tester-fips","label":"policy-controller-tester-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/policy-controller-tester-fips","purlType":"apk","versions":[{"text":"< 0.12.0-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.12.0-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"snyk-cli","name":"snyk-cli","label":"snyk-cli","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/snyk-cli","purlType":"apk","versions":[{"text":"< 1.1293.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1293.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spire-agent","name":"spire-agent","label":"spire-agent","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spire-agent","purlType":"apk","versions":[{"text":"< 1.11.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.11.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spire-agent-fips","name":"spire-agent-fips","label":"spire-agent-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spire-agent-fips","purlType":"apk","versions":[{"text":"< 1.12.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spire-oidc-discovery-provider","name":"spire-oidc-discovery-provider","label":"spire-oidc-discovery-provider","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spire-oidc-discovery-provider","purlType":"apk","versions":[{"text":"< 1.11.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.11.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spire-oidc-discovery-provider-fips","name":"spire-oidc-discovery-provider-fips","label":"spire-oidc-discovery-provider-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spire-oidc-discovery-provider-fips","purlType":"apk","versions":[{"text":"< 1.12.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spire-server","name":"spire-server","label":"spire-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spire-server","purlType":"apk","versions":[{"text":"< 1.11.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.11.2-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"spire-server-fips","name":"spire-server-fips","label":"spire-server-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/spire-server-fips","purlType":"apk","versions":[{"text":"< 1.12.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.12.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"tfsec","name":"tfsec","label":"tfsec","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/tfsec","purlType":"apk","versions":[{"text":"< 1.28.10-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.10-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zarf","name":"zarf","label":"zarf","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zarf","purlType":"apk","versions":[{"text":"< 0.40.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.40.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"zot","name":"zot","label":"zot","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/zot","purlType":"apk","versions":[{"text":"< 2.1.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"conftest","name":"conftest","label":"conftest","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/conftest","purlType":"apk","versions":[{"text":"< 0.55.0-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.55.0-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"cosign","name":"cosign","label":"cosign","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/cosign","purlType":"apk","versions":[{"text":"< 2.4.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.4.0-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"k8sgpt","name":"k8sgpt","label":"k8sgpt","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/k8sgpt","purlType":"apk","versions":[{"text":"< 0.3.42-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.3.42-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kots","name":"kots","label":"kots","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kots","purlType":"apk","versions":[{"text":"< 1.117.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.117.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kots-compat","name":"kots-compat","label":"kots-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kots-compat","purlType":"apk","versions":[{"text":"< 1.117.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.117.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kots-symlink-compat","name":"kots-symlink-compat","label":"kots-symlink-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kots-symlink-compat","purlType":"apk","versions":[{"text":"< 1.117.2-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.117.2-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubescape","name":"kubescape","label":"kubescape","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubescape","purlType":"apk","versions":[{"text":"< 3.0.18-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.18-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opa","name":"opa","label":"opa","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opa","purlType":"apk","versions":[{"text":"< 0.68.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.68.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"policy-controller","name":"policy-controller","label":"policy-controller","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/policy-controller","purlType":"apk","versions":[{"text":"< 0.9.0-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.0-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"policy-controller-tester","name":"policy-controller-tester","label":"policy-controller-tester","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/policy-controller-tester","purlType":"apk","versions":[{"text":"< 0.9.0-r10","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.9.0-r10","eol":null,"hubHref":null},{"vendor":"wolfi","product":"snyk-cli","name":"snyk-cli","label":"snyk-cli","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/snyk-cli","purlType":"apk","versions":[{"text":"< 1.1293.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1293.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spire-agent","name":"spire-agent","label":"spire-agent","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spire-agent","purlType":"apk","versions":[{"text":"< 1.11.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.11.2-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spire-oidc-discovery-provider","name":"spire-oidc-discovery-provider","label":"spire-oidc-discovery-provider","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spire-oidc-discovery-provider","purlType":"apk","versions":[{"text":"< 1.11.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.11.2-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"spire-server","name":"spire-server","label":"spire-server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/spire-server","purlType":"apk","versions":[{"text":"< 1.11.2-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.11.2-r5","eol":null,"hubHref":null},{"vendor":"wolfi","product":"tfsec","name":"tfsec","label":"tfsec","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/tfsec","purlType":"apk","versions":[{"text":"< 1.28.10-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.28.10-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zarf","name":"zarf","label":"zarf","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zarf","purlType":"apk","versions":[{"text":"< 0.40.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.40.1-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"zot","name":"zot","label":"zot","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/zot","purlType":"apk","versions":[{"text":"< 2.1.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.1.1-r2","eol":null,"hubHref":null},{"vendor":"github.com/open-policy-agent","product":"opa","name":"github.com/open-policy-agent/opa","label":"opa","ecosystem":"Go","cpePart":null,"purl":"pkg:golang/github.com/open-policy-agent/opa","purlType":"golang","versions":[{"text":"< 0.68.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.68.0","eol":null,"hubHref":null},{"vendor":"openpolicyagent","product":"open_policy_agent","name":"open policy agent","label":"open_policy_agent","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 0.68.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.68.0","eol":null,"hubHref":"/vendor/openpolicyagent/open_policy_agent"},{"vendor":"styra","product":"opa","name":"OPA","label":"opa","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< v0.68.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< v0.68.0","eol":null,"hubHref":"/vendor/styra/opa"}],"affectedCount":44,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.tenable.com/security/research/tra-2024-36","label":"www.tenable.com/security/research/tra-2024-36","hostname":"www.tenable.com","tags":["WEB","Third Party Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8260.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2024/8xxx/CVE-2024-8260.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-8260","label":"nvd.nist.gov/vuln/detail/CVE-2024-8260","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/open-policy-agent/opa","label":"github.com/open-policy-agent/opa","hostname":"github.com","tags":["PACKAGE"]},{"url":"https://github.com/open-policy-agent/opa/commit/10f4d553e6bb6ae9c69611ecdd9a77dda857070e","label":"github.com/open-policy-agent/opa/commit/10f4d553e6bb6ae9c69611ecdd9a77dda857070e","hostname":"github.com","tags":["WEB","FIX"]},{"url":"https://github.com/open-policy-agent/opa/releases/tag/v0.68.0","label":"github.com/open-policy-agent/opa/releases/tag/v0.68.0","hostname":"github.com","tags":["WEB"]},{"url":"https://pkg.go.dev/vuln/GO-2024-3141","label":"pkg.go.dev/vuln/GO-2024-3141","hostname":"pkg.go.dev","tags":["WEB"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":["CGA-29XX-PJPW-7X2R","CGA-2J3J-4MM5-FPM7","CGA-59Q6-6HWX-3GCF","CGA-5C66-W9QR-VJ67","CGA-6F94-X6V7-VQC8","CGA-7V33-G2F6-4346","CGA-8HJ2-X33H-JM4W","CGA-8XFG-4HW5-VJCJ","CGA-9969-43HG-MXVG","CGA-C36Q-CW7X-G24F","CGA-FQV4-Q739-VPRM","CGA-GQJ4-HC5G-HMVM","CGA-H3GJ-F857-HXR4","CGA-HFV7-8R5C-46P5","CGA-JFF6-4R5M-FJCQ","CGA-JWRC-J899-Q434","CGA-Q3XG-M96Q-M899","CGA-QGWM-CRMP-W6VM","CGA-RQMR-V7F6-GR6Q","CGA-VX3J-4CJ2-74QR","CGA-WJGR-9Q9W-8787","CGA-X85F-FVCJ-2JH3","CGA-XG4P-JW55-G862","CGA-XJJP-HRXW-9X84"]},"timeline":[{"kind":"published","date":"2024-08-30T12:22:45.964Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-30T13:17:20.246Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":29,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T21:25:02.287Z","stale":false,"partial":false}}