CVE-2024-4603

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

- Security Improvement: Added authentication and authorization checks for HTTP
OPTIONS requests in OpaMiddleware. This ensures that OPTIONS requests are
subjected to the same security policies as other HTTP methods, preventing
potential information leaks.
[See advisory for more details](https://github.com/advisories/GHSA-5f5c-8rvc-j8wf)
- Update dependencies due to multiple vulnerabilities.

Resources

• https://github.com/busykoala/fastapi-opa/commit/00ba64adc542962e05a1983d7a89ea1c07f90d8c
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-4603