Go/github.com/authzed/spicedb

SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not

Modified: 10/15/2024

SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected

Modified: 6/25/2026

Lookup operations do not take into account wildcards in SpiceDB

Modified: 8/21/2024

SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results

Modified: 5/14/2026

SpiceDB binding metrics port to untrusted networks and can leak command-line flags

Modified: 9/10/2026

SpiceDB checks involving relations with caveats can result in no permission when permission is expected

Modified: 6/10/2025

SpiceDB exclusions can result in no permission returned when permission expected

Modified: 9/10/2026

Integer overflow in chunking helper causes dispatching to miss elements or panic

Modified: 9/10/2026

SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used

Modified: 9/10/2026

SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logs

Modified: 6/25/2026

SpiceDB leaks information in log files when URI cannot be parsed

Modified: 9/10/2026

SpiceDB having multiple caveats on resources of the same type may improperly result in no permission

Modified: 11/18/2024

SpiceDB's LookupResources may return partial results

Modified: 9/10/2026

SpiceDB: Caveat structures with nested lists can result in improper cache reuse

Modified: 6/25/2026

SpiceDB WriteRelationships fails silently if payload is too big

Modified: 5/14/2026

LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic

Modified: 9/10/2026

Lookup operations do not take into account wildcards in SpiceDB in github.com/authzed/spicedb

Modified: 3/3/2026

SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb

Modified: 2/4/2026

SpiceDB's LookupResources may return partial results in github.com/authzed/spicedb

Modified: 3/3/2026

SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb

Modified: 2/4/2026

Integer overflow in chunking helper causes dispatching to miss elements or panic in github.com/authzed/spicedb

Modified: 2/4/2026

SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used in github.com/authzed/spicedb

Modified: 2/4/2026

SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb

Modified: 2/4/2026

SpiceDB having multiple caveats on resources of the same type may improperly result in no permission in github.com/authzed/spicedb

Modified: 3/3/2026

SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not in github.com/authzed/spicedb

Modified: 3/3/2026

SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb

Modified: 3/3/2026

SpiceDB WriteRelationships fails silently if payload is too big in github.com/authzed/spicedb

Modified: 3/3/2026

SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb

Modified: 3/3/2026

LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

Modified: 2/19/2026

SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

Modified: 6/25/2026

SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logs in github.com/authzed/spicedb

Modified: 6/25/2026

SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb

Modified: 6/25/2026