CVE-2026-46668
- EPSS 0.28%
- Veröffentlicht 10.06.2026 20:11:44
- Zuletzt bearbeitet 11.06.2026 15:35:45
SpiceDB is an open source database system for creating and managing security-critical application permissions. From version 1.15.0 to before version 1.52.0, caveat structures with nested lists can result in improper cache reuse. This issue has been p...
CVE-2026-40091
- EPSS 0.17%
- Veröffentlicht 14.04.2026 23:50:25
- Zuletzt bearbeitet 23.04.2026 17:15:42
SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions 1.49.0 through 1.51.0, when SpiceDB starts with log level info, the startup "configuration" log will include the full datastore...
CVE-2025-65111
- EPSS 0.19%
- Veröffentlicht 21.11.2025 22:02:52
- Zuletzt bearbeitet 31.12.2025 13:41:21
SpiceDB is an open source database system for creating and managing security-critical application permissions. Prior to version 1.47.1, if a schema includes the following characteristics: permission defined in terms of a union (+) and that union refe...
CVE-2025-64529
- EPSS 0.22%
- Veröffentlicht 10.11.2025 22:28:51
- Zuletzt bearbeitet 21.11.2025 13:35:52
SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions prior to 1.45.2, users who use the exclusion operator somewhere in their authorization schema; have configured their SpiceDB se...
CVE-2025-49011
- EPSS 0.27%
- Veröffentlicht 06.06.2025 17:36:21
- Zuletzt bearbeitet 04.09.2025 16:48:00
SpiceDB is an open source database for storing and querying fine-grained authorization data. Prior to version 1.44.2, on schemas involving arrows with caveats on the arrow’ed relation, when the path to resolve a CheckPermission request involves the e...
CVE-2024-48909
- EPSS 0.31%
- Veröffentlicht 14.10.2024 21:15:12
- Zuletzt bearbeitet 17.10.2024 17:56:11
SpiceDB is an open source database for scalably storing and querying fine-grained authorization data. Starting in version 1.35.0 and prior to version 1.37.1, clients that have enabled `LookupResources2` and have caveats in the evaluation path for the...
CVE-2024-46989
- EPSS 0.28%
- Veröffentlicht 18.09.2024 18:15:07
- Zuletzt bearbeitet 04.09.2025 16:41:18
spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Multiple caveats over the same indirect subject type on the same relation can result in no permission being retur...
CVE-2024-38361
- EPSS 0.4%
- Veröffentlicht 20.06.2024 23:15:52
- Zuletzt bearbeitet 02.09.2025 20:37:12
Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Use of an exclusion under an arrow that has multiple resources may resolve to `NO_PERMISSION` when permission is ...
CVE-2024-32001
- EPSS 0.58%
- Veröffentlicht 10.04.2024 23:15:07
- Zuletzt bearbeitet 02.09.2025 19:25:00
SpiceDB is a graph database purpose-built for storing and evaluating access control data. Use of a relation of the form: `relation folder: folder | folder#parent` with an arrow such as `folder->view` can cause LookupSubjects to only return the subjec...
CVE-2024-27101
- EPSS 0.46%
- Veröffentlicht 01.03.2024 21:15:08
- Zuletzt bearbeitet 02.09.2025 21:42:21
SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Integer overflow in chunking helper causes dispatching to miss elements or panic. Any SpiceDB cluster with any schema w...