Priority MEDIUM 57
SpiceDB is an open source database for storing and querying fine-grained authorization data.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00329 · Published 2025-06-06 · Fixed in 1.44.2 CWE-358
Priority MEDIUM 41
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.
CVSS 3.1HIGH 8.7· Adjacent network · Low privileges · No interaction · EPSS 0.00762 · Published 2023-04-14 · Fixed in 1.19.1 CWE-209
Priority MEDIUM 40
SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00456 · Published 2024-03-01 · Fixed in 1.29.2 CWE-190
Priority MEDIUM 40
SpiceDB is a database system for managing security-critical application permissions.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.0132 · Published 2022-01-11 · Fixed in 1.4.0 CWE-155
Priority LOW 29
SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00438 · Published 2023-10-31 · Fixed in 1.27.0-rc1 CWE-532
Priority LOW 26
SpiceDB is an open source database system for creating and managing security-critical application permissions.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00166 · Published 2026-04-14 · Fixed in 1.51.1 CWE-532
Priority LOW 24
spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0029 · Published 2024-09-18 · Fixed in 1.35.3 CWE-269
Priority LOW 24
Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00396 · Published 2024-06-20 · Fixed in 1.33.1 CWE-281
Priority LOW 24
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00448 · Published 2023-06-26 · Fixed in 1.22.2 CWE-913
Priority LOW 21
SpiceDB is a graph database purpose-built for storing and evaluating access control data.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00578 · Published 2024-04-10 · Fixed in 1.30.1 CWE-755
Priority LOW 20
SpiceDB is an open source database system for creating and managing security-critical application permissions.
CVSS 4.0LOW 2.9· Network · No auth · No interaction · EPSS 0.00233 · Published 2025-11-21 · Fixed in 1.47.1 CWE-277
Priority LOW 19
SpiceDB is an open source database system for creating and managing security-critical application permissions.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.00264 · Published 2025-11-10 · Fixed in 1.45.2 CWE-770
Priority LOW 18
SpiceDB is an open source database system for creating and managing security-critical application permissions.
CVSS 3.1LOW 3.7· Network · No auth · No interaction · EPSS 0.00341 · Published 2026-09-14 · Fixed in 1.54.0 CWE-863
Priority LOW 12
SpiceDB is an open source database system for creating and managing security-critical application permissions.
CVSS 4.0LOW 2.3· Network · Low privileges · No interaction · EPSS 0.00276 · Published 2026-06-10 · Fixed in 1.52.0 CWE-285
Priority LOW 12
SpiceDB is an open source database for scalably storing and querying fine-grained authorization data.
CVSS 3.1LOW 2.4· Network · High privileges · User interaction · EPSS 0.00319 · Published 2024-10-14 · Fixed in 1.37.1 CWE-172
THREATIST.IORead the docs