Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
authzed records in CISA KEVNo authzed vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 57
SpiceDB is an open source database for storing and querying fine-grained authorization data.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00329 · Published 2025-06-06 · Fixed in 1.44.2 CWE-358
Priority MEDIUM 41
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.
CVSS 3.1HIGH 8.7· Adjacent network · Low privileges · No interaction · EPSS 0.00762 · Published 2023-04-14 · Fixed in 1.19.1 CWE-209
Priority MEDIUM 40
SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00456 · Published 2024-03-01 · Fixed in 1.29.2 CWE-190
Priority MEDIUM 40
SpiceDB is a database system for managing security-critical application permissions.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.0132 · Published 2022-01-11 · Fixed in 1.4.0 CWE-155
Priority LOW 29
SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00438 · Published 2023-10-31 · Fixed in 1.27.0-rc1 CWE-532
Priority LOW 26
SpiceDB is an open source database system for creating and managing security-critical application permissions.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00166 · Published 2026-04-14 · Fixed in 1.51.1 CWE-532
Priority LOW 24
spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0029 · Published 2024-09-18 · Fixed in 1.35.3 CWE-269
Priority LOW 24
Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00396 · Published 2024-06-20 · Fixed in 1.33.1 CWE-281
Priority LOW 24
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00448 · Published 2023-06-26 · Fixed in 1.22.2 CWE-913
Priority LOW 21
SpiceDB is a graph database purpose-built for storing and evaluating access control data.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00578 · Published 2024-04-10 · Fixed in 1.30.1 CWE-755
Priority LOW 20
SpiceDB is an open source database system for creating and managing security-critical application permissions.
CVSS 4.0LOW 2.9· Network · No auth · No interaction · EPSS 0.00233 · Published 2025-11-21 · Fixed in 1.47.1 CWE-277
Priority LOW 19
SpiceDB is an open source database system for creating and managing security-critical application permissions.
CVSS 4.0LOW 2.7· Network · No auth · No interaction · EPSS 0.00264 · Published 2025-11-10 · Fixed in 1.45.2 CWE-770
Priority LOW 12
SpiceDB is an open source database for scalably storing and querying fine-grained authorization data.
CVSS 3.1LOW 2.4· Network · High privileges · User interaction · EPSS 0.00319 · Published 2024-10-14 · Fixed in 1.37.1 CWE-172
THREATIST.IORead the docs