v1.20.2

2026-09-04T08:52:17Z•80a167c06810010dec4ceb59db6a67c2de3826cd951231ff28609558e572b606

Compile APIGo standard libraryOPAOpen Policy AgentRegoSQL injectiondependency updatememory leakparser regressionremote JSON Schemasecurity update

Open source link →

What happened

Open Policy Agent (OPA) release notes covering versions 1.17.1 through 1.20.2. Security-relevant changes include a fix for SQL injection in the Compile API in v1.19.0, Go standard-library vulnerability remediation via updated Go toolchains in v1.17.1 and v1.19.1, and restrictions on remote JSON Schema reference fetching in v1.20.0. Later releases primarily address parser and runtime regressions, including a memory leak fix in v1.18.1.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: open_policy_agent_opa_releases
Record identifier: 80a167c06810010dec4ceb59db6a67c2de3826cd951231ff28609558e572b606
Enrichment time: 2026-09-04T08:52:17Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records