github.com/authzed/spicedb vulnerabilities (Go)
16 vulnerabilities.
-
github.com/authzed/spicedbGo SpiceDBChecks involving relations with caveats can result in unconditional permission when conditional permission is expected 3.7 Low -
github.com/authzed/spicedbGo SpiceDB: Caveat structures with nested lists can result in improper cache reuse 2.3 Low -
github.com/authzed/spicedbGo SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logs 6.0 Medium -
github.com/authzed/spicedbGo LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic 1.3 Low -
github.com/authzed/spicedbGo SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results 2.9 Low -
github.com/authzed/spicedbGo SpiceDB's WriteRelationships fails silently if payload is too big 2.7 Low -
github.com/authzed/spicedbGo SpiceDB checks involving relations with caveats can result in no permission when permission is expected 3.7 Low -
github.com/authzed/spicedbGo SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not 2.0 Low -
github.com/authzed/spicedbGo Multiple caveats on resources of the same type can result in no permission when permission is expected 3.7 Low -
github.com/authzed/spicedbGo Permissions processing error in spacedb 3.7 Low -
github.com/authzed/spicedbGo SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used 2.2 Low -
github.com/authzed/spicedbGo Integer overflow in chunking helper causes dispatching to miss elements or panic 7.3 High -
github.com/authzed/spicedbGo `SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed 4.2 Medium -
github.com/authzed/spicedbGo LookupResources may return partial results in spicedb 3.7 Low -
github.com/authzed/spicedbGo SpiceDB binding metrics port to untrusted networks and can leak command-line flags 8.7 High -
github.com/authzed/spicedbGo Lookup operations do not take into account wildcards in SpiceDB 8.1 High