Authzed

Spicedb

14 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.28%
  • Veröffentlicht 10.06.2026 20:11:44
  • Zuletzt bearbeitet 11.06.2026 15:35:45

SpiceDB is an open source database system for creating and managing security-critical application permissions. From version 1.15.0 to before version 1.52.0, caveat structures with nested lists can result in improper cache reuse. This issue has been p...

  • EPSS 0.17%
  • Veröffentlicht 14.04.2026 23:50:25
  • Zuletzt bearbeitet 23.04.2026 17:15:42

SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions 1.49.0 through 1.51.0, when SpiceDB starts with log level info, the startup "configuration" log will include the full datastore...

  • EPSS 0.19%
  • Veröffentlicht 21.11.2025 22:02:52
  • Zuletzt bearbeitet 31.12.2025 13:41:21

SpiceDB is an open source database system for creating and managing security-critical application permissions. Prior to version 1.47.1, if a schema includes the following characteristics: permission defined in terms of a union (+) and that union refe...

  • EPSS 0.22%
  • Veröffentlicht 10.11.2025 22:28:51
  • Zuletzt bearbeitet 21.11.2025 13:35:52

SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions prior to 1.45.2, users who use the exclusion operator somewhere in their authorization schema; have configured their SpiceDB se...

  • EPSS 0.27%
  • Veröffentlicht 06.06.2025 17:36:21
  • Zuletzt bearbeitet 04.09.2025 16:48:00

SpiceDB is an open source database for storing and querying fine-grained authorization data. Prior to version 1.44.2, on schemas involving arrows with caveats on the arrow’ed relation, when the path to resolve a CheckPermission request involves the e...

  • EPSS 0.31%
  • Veröffentlicht 14.10.2024 21:15:12
  • Zuletzt bearbeitet 17.10.2024 17:56:11

SpiceDB is an open source database for scalably storing and querying fine-grained authorization data. Starting in version 1.35.0 and prior to version 1.37.1, clients that have enabled `LookupResources2` and have caveats in the evaluation path for the...

  • EPSS 0.28%
  • Veröffentlicht 18.09.2024 18:15:07
  • Zuletzt bearbeitet 04.09.2025 16:41:18

spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Multiple caveats over the same indirect subject type on the same relation can result in no permission being retur...

Exploit
  • EPSS 0.4%
  • Veröffentlicht 20.06.2024 23:15:52
  • Zuletzt bearbeitet 02.09.2025 20:37:12

Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications. Use of an exclusion under an arrow that has multiple resources may resolve to `NO_PERMISSION` when permission is ...

  • EPSS 0.58%
  • Veröffentlicht 10.04.2024 23:15:07
  • Zuletzt bearbeitet 02.09.2025 19:25:00

SpiceDB is a graph database purpose-built for storing and evaluating access control data. Use of a relation of the form: `relation folder: folder | folder#parent` with an arrow such as `folder->view` can cause LookupSubjects to only return the subjec...

  • EPSS 0.46%
  • Veröffentlicht 01.03.2024 21:15:08
  • Zuletzt bearbeitet 02.09.2025 21:42:21

SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Integer overflow in chunking helper causes dispatching to miss elements or panic. Any SpiceDB cluster with any schema w...