VULNRABLE / Vulnerability / GHSA-c33x-vcv4-vg3g

GHSA-c33x-vcv4-vg3g

LOW LOW cedar-policy GHSA

Exploit verdict: No active-exploit signal

CVSS Score
2
Severity
LOW
EPSS
—
Source
GHSA

Summary

Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

What this means

GHSA-c33x-vcv4-vg3g is a low-severity vulnerability affecting cedar-policy, rated CVSS 2. Published October 29, 2026.

View full advisory at GHSA →