RATATOSKRATATOSK
Sign in

Open Policy Agent (OPA)

v1.19.1Security
Aug 17, 2026

CHECK 1

A security maintenance release updates the Go version used to build OPA and addresses vulnerabilities in the Go standard library used by its HTTP handler and crypto builtins. Operators using the published build receive this update, while users building their own binaries or images control the relevant Go version themselves.

Check if affected (1)

  • securitycriticalThe Go build dependency, updated to 1.26.6

    Applies if you build OPA binaries or images yourself.

    OPA is built with Go 1.26.6, addressing standard-library vulnerabilities in code used by OPA's HTTP handler and crypto builtins. The listed advisories are GO-2026-5026, GO-2026-5972, GO-2026-6088, GO-2026-6089, GO-2026-6090, GO-2026-6091, and GO-2026-6218.

Add Open Policy Agent (OPA) to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Open Policy Agent (OPA) releases →