cedar-policy has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 8.8 (high).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.8
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Products
- @cedar-policy/authorization-for-expressjs 1
- cedar-policy 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
Worst active — by depth score
CVE-2026-49473High· 8.8@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowi…48GHSA-c33x-vcv4-vg3gLowCedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence14
cedar-policy vulnerabilities
CVEs affecting cedar-policy, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
GHSA-c33x-vcv4-vg3gLowCedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence
Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence
▾ Sunlitcedar-policy · cedar-policyvia OSV
CVE-2026-49473High· 8.8@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowi…
@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowi…
▾ Twilightcedar-policy · @cedar-policy/authorization-for-expressjsEPSS 0.47%via NVD