CVE Browser

SpiceDBChecks involving relations with caveats can result in unconditional permission when conditional permission is expected

SpiceDB: Caveat structures with nested lists can result in improper cache reuse

SpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logs

SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results

SpiceDB's WriteRelationships fails silently if payload is too big

SpiceDB checks involving relations with caveats can result in no permission when permission is expected

SpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is not

Multiple caveats on resources of the same type can result in no permission when permission is expected

Permissions processing error in spacedb

SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used

Integer overflow in chunking helper causes dispatching to miss elements or panic

`SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed

LookupResources may return partial results in spicedb

SpiceDB binding metrics port to untrusted networks and can leak command-line flags

Lookup operations do not take into account wildcards in SpiceDB