Cedar: JSON template is in scope missing slot-id validation allows link panic and decision divergence

Description

Cedar users must be using all of the following features to be affected by this advisory: JSON format policies, policy templates, and the is in scope condition. This advisory only affects JSON-formatted Cedar policy templates containing is in scope conditions that are malformed according to the Cedar syntax.

Recommendation

Update the @cedar-policy/cedar-wasm package to the latest compatible version. Followings are version details:

• Affected version(s): **>= 3.2.0, < 3.4.3

  >= 4.0.1, < 4.11.1**

• Patched version(s): **3.4.3

  4.11.1**

References

• GHSA-c33x-vcv4-vg3g
• CWE-20