Security
فارسی
All products

github.com/authzed/spicedb

Go · Package
16 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panicGHSA-VHVQ-FV9F-WH4Q · GO-2026-4465Version ranges need review. github.com/authzed/spicedb Go Low Fix reported
SpiceDB exclusions can result in no permission returned when permission expectedCVE-2024-38361 · GHSA-GRJV-GJGR-66G2Version ranges need review. github.com/authzed/spicedb Go Medium Fix reported
SpiceDB: LookupSubjects may return partial results if a specific kind of relation is usedCVE-2024-32001 · GHSA-J85Q-46HG-36P2Version ranges need review. github.com/authzed/spicedb Go Low Fix reported
Integer overflow in chunking helper causes dispatching to miss elements or panicCVE-2024-27101 · GHSA-H3M7-RQC4-7H9PVersion ranges need review. github.com/authzed/spicedb Go High Fix reported
SpiceDB's LookupResources may return partial resultsCVE-2023-35930 · GHSA-M54H-5X5F-5M6RVersion ranges need review. github.com/authzed/spicedb Go Low Fix reported
SpiceDB leaks information in log files when URI cannot be parsedCVE-2023-46255 · GHSA-JG7W-CXJV-98C2Version ranges need review. github.com/authzed/spicedb Go Medium Fix reported
SpiceDB binding metrics port to untrusted networks and can leak command-line flagsCVE-2023-29193 · GHSA-CJR9-MR35-7XH6Version ranges need review. github.com/authzed/spicedb Go High Fix reported
SpiceDB: Caveat structures with nested lists can result in improper cache reuseCVE-2026-46668 · GHSA-MQCF-GQVG-RMHMVersion ranges need review. github.com/authzed/spicedb Go Low Fix reported
SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logsCVE-2026-40091 · GHSA-JF4F-RR2C-9M58Version ranges need review. github.com/authzed/spicedb Go Medium Fix reported
SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expectedCVE-2026-55866 · GHSA-4VRG-R928-H5VVVersion ranges need review. github.com/authzed/spicedb Go Low Fix reported
SpiceDB WriteRelationships fails silently if payload is too bigCVE-2025-64529 · GHSA-PM3X-JRHH-QCR7Version ranges need review. github.com/authzed/spicedb Go Low Fix reported
SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete ResultsCVE-2025-65111 · GHSA-9M7R-G8HG-X3VRVersion ranges need review. github.com/authzed/spicedb Go Low Fix reported
SpiceDB checks involving relations with caveats can result in no permission when permission is expectedCVE-2025-49011 · GHSA-CWWM-HR97-QFXMVersion ranges need review. github.com/authzed/spicedb Go Low Fix reported
SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is notCVE-2024-48909 · GHSA-3C32-4HQ9-6WGJVersion ranges need review. github.com/authzed/spicedb Go Low Fix reported
SpiceDB having multiple caveats on resources of the same type may improperly result in no permissionCVE-2024-46989 · GHSA-JHG6-6QRX-38MRVersion ranges need review. github.com/authzed/spicedb Go Medium Fix reported
Lookup operations do not take into account wildcards in SpiceDBCVE-2022-21646 · GHSA-7P8F-8HJM-WM92Version ranges need review. github.com/authzed/spicedb Go High Fix reported