cedar-policy vulnerabilities
4 published CVEs name cedar-policy among the affected products.
- 4Published CVEs4 of them scored
- 4Last 12 monthspublished in the last year
- 0Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-49473
@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation
cedar-policy · authorization-for-expressjs
High8.8 - CVE-2026-55771
CedarJava has policy injection, type confusion, and incorrect equality comparison vulnerabilities
cedar-policy · cedar-java
High8.8 - CVE-2026-55773
CedarJava has a policy injection vulnerability
cedar-policy · cedar-java
High8.8 - CVE-2026-55772
CedarJava has a type confusion vulnerability
cedar-policy · cedar-java
High8.8