Skip to content
OpenAdvisories

Vendor

authzed

15 known vulnerabilities.

Products

spicedb 15
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.0
    CVE-2026-40091

    SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logs

    SpiceDB is an open source database system for creating and managing security-critical application permissions. In versions 1.49.0 through 1.51.0, when SpiceDB starts with log level info, the startup "configuration" log will include the full datastore DSN, inc…

    authzed spicedb github.com/authzed/spicedb Go
  • Medium 4.2
    CVE-2023-46255

    `SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed

    SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Prior to version 1.27.0-rc1, when the provided datastore URI is malformed (e.g. by having a password which contains `:`) the full…

    authzed spicedb github.com/authzed/spicedb Go