v1.21.0
2026-09-25T08:52:13Z•2a8becc41f9ca8bab11ba03e30bf255c93ac7ed7b4036207faba26cc00146d6f
Compile APIGo vulnerabilitiesOPAOpen Policy AgentRegoSQL injectionSSRF mitigationmemory leakpolicy enginerelease notesremote JSON Schemasecurity fix
What happened
Open Policy Agent (OPA) release notes covering versions 1.18.0 through 1.21.0. Security-relevant changes include a fix for SQL injection in the Compile API (v1.19.0), restrictions on remote JSON Schema $ref fetching via allow_net (v1.20.0), a memory leak fix affecting OPA servers (v1.18.1), and Go standard-library vulnerability remediation through an updated Go toolchain (v1.19.1). Other releases address parser, formatter, recursion-check, YAML schema, and numeric-comparison regressions.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- open_policy_agent_opa_releases
- Record identifier
- 2a8becc41f9ca8bab11ba03e30bf255c93ac7ed7b4036207faba26cc00146d6f
- Enrichment time
- 2026-09-25T08:52:13Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.