cedar-policy
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| cedar-java | 3 | – | Jul 13, 2026 |
| authorization-for-expressjs | 1 | – | Aug 12, 2026 |
Exploited and recent CVEs
- CVE-2026-49473 @cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation 0.5%
- CVE-2026-55771 CedarJava has policy injection, type confusion, and incorrect equality comparison vulnerabilities 0.6%
- CVE-2026-55773 CedarJava has a policy injection vulnerability 0.5%
- CVE-2026-55772 CedarJava has a type confusion vulnerability 0.5%