Skip to content
OpenAdvisories

Package · Go

github.com/authzed/spicedb

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.3
    CVE-2024-27101

    Integer overflow in chunking helper causes dispatching to miss elements or panic

    SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Integer overflow in chunking helper causes dispatching to miss elements or panic. Any SpiceDB cluster with any schema where a res…

    authzed spicedb github.com/authzed/spicedb Go
  • High 8.7
    CVE-2023-29193

    SpiceDB binding metrics port to untrusted networks and can leak command-line flags

    SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. The `spicedb serve` command contains a flag named `--grpc-preshared-key` which is used to protect the gRPC API from being…

    authzed spicedb github.com/authzed/spicedb Go
  • High 8.1
    CVE-2022-21646

    Lookup operations do not take into account wildcards in SpiceDB

    SpiceDB is a database system for managing security-critical application permissions. Any user making use of a wildcard relationship under the right hand branch of an `exclusion` or within an `intersection` operation will see `Lookup`/`LookupResources` return …

    authzed spicedb github.com/authzed/spicedb Go