TI-2026-40325 CVE-2026-55866 · GHSA-4vrg-r928-h5vv
Incorrect authorization in authzed spicedb
Priority LOW 18
SpiceDB is an open source database system for creating and managing security-critical application permissions.
Vulnerabilities
15 records
TI-2026-34303 CVE-2026-46668 · GHSA-mqcf-gqvg-rmhm
SpiceDB: Caveat structures with nested lists can result in improper cache reuse
Priority LOW 12
SpiceDB is an open source database system for creating and managing security-critical application permissions.
TI-2026-28919 CVE-2026-40091 · GHSA-jf4f-rr2c-9m58
SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logs
Priority LOW 26
SpiceDB is an open source database system for creating and managing security-critical application permissions.
TI-2025-40263 CVE-2025-65111 · GHSA-9m7r-g8hg-x3vr
SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results
Priority LOW 20
SpiceDB is an open source database system for creating and managing security-critical application permissions.
TI-2025-39919 CVE-2025-64529 · GHSA-pm3x-jrhh-qcr7
SpiceDB's WriteRelationships fails silently if payload is too big
Priority LOW 19
SpiceDB is an open source database system for creating and managing security-critical application permissions.
TI-2025-31139 CVE-2025-49011 · GHSA-cwwm-hr97-qfxm
SpiceDB checks involving relations with caveats can result in no permission when permission is expected
Priority MEDIUM 57
SpiceDB is an open source database for storing and querying fine-grained authorization data.
TI-2024-32606 CVE-2024-48909 · GHSA-3c32-4hq9-6wgj
SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not
Priority LOW 12
SpiceDB is an open source database for scalably storing and querying fine-grained authorization data.
TI-2024-31378 CVE-2024-46989 · GHSA-jhg6-6qrx-38mr
Multiple caveats on resources of the same type can result in no permission when permission is expected
Priority LOW 24
spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications.
TI-2024-25619 CVE-2024-38361 · GHSA-grjv-gjgr-66g2
Permissions processing error in spacedb
Priority LOW 24
Spicedb is an Open Source, Google Zanzibar-inspired permissions database to enable fine-grained authorization for customer applications.
TI-2024-21100 CVE-2024-32001 · GHSA-j85q-46hg-36p2
SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used
Priority LOW 21
SpiceDB is a graph database purpose-built for storing and evaluating access control data.
TI-2024-17962 CVE-2024-27101 · GHSA-h3m7-rqc4-7h9p
Integer overflow in chunking helper causes dispatching to miss elements or panic
Priority MEDIUM 40
SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions.
TI-2023-24882 CVE-2023-46255 · GHSA-jg7w-cxjv-98c2
`SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed
Priority LOW 29
SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions.
TI-2023-17992 CVE-2023-35930 · GHSA-m54h-5x5f-5m6r
LookupResources may return partial results in spicedb
Priority LOW 24
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.
TI-2023-13621 CVE-2023-29193 · GHSA-cjr9-mr35-7xh6
SpiceDB binding metrics port to untrusted networks and can leak command-line flags
Priority MEDIUM 41
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions.
TI-2022-06024 CVE-2022-21646 · GHSA-7p8f-8hjm-wm92
Lookup operations do not take into account wildcards in SpiceDB
Priority MEDIUM 40
SpiceDB is a database system for managing security-critical application permissions.