v1.19.0
2026-07-31T08:52:12Z•e70339554e2d4102f5986f357ee071320468b7e072cffea9f344bfb1cc8f6d47
Compile APIGo vulnerabilitiesOPAOpen Policy AgentRegoSQL injectiondenial of servicememory leakpatch managementrelease update
What happened
Open Policy Agent releases v1.16.0 through v1.19.0 include a critical SQL injection fix in the Compile API, a memory leak fix affecting OPA servers, Go standard-library vulnerability remediation, and other correctness and stability updates. Users should prioritize upgrading to v1.19.0 or the latest supported release, particularly where the Compile API processes caller-controlled dynamic field names.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- open_policy_agent_opa_releases
- Record identifier
- e70339554e2d4102f5986f357ee071320468b7e072cffea9f344bfb1cc8f6d47
- Enrichment time
- 2026-07-31T08:52:12Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.