v1.17.1
2026-06-09T08:52:20Z•c5442bc9179b6724bcf8c7cd968fe442fa3fb8608059c68497c5a0daec299312
OPAbuild-timecryptodependency-upgradego1.26.4golanghttp-handlermitigationopen-policy-agentreleasestdlib-vulnerability
What happened
Open Policy Agent (OPA) v1.17.1 updates the Go toolchain used to build OPA to Go 1.26.4 to address vulnerabilities in the Go standard library that affect components OPA uses (HTTP handler and crypto builtins). The release otherwise matches v1.17.0; users who build OPA from source control their Go version and are not affected by the prebuilt-binary change. Earlier releases in the series also bumped Go (1.26.3, 1.26.2) to mitigate related issues.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- open_policy_agent_opa_releases
- Record identifier
- c5442bc9179b6724bcf8c7cd968fe442fa3fb8608059c68497c5a0daec299312
- Enrichment time
- 2026-06-09T08:52:20Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.