Authzed vulnerabilities
We track 3 vulnerabilities in Authzed products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 1, 2024.
Latest Authzed vulnerabilities
- 9.1 Critical severity
spicedb: Integer Overflow or Wraparound
SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Integer overflow in chunking helper causes dispatching to miss elements or panic. Any SpiceDB cluster with any schema where a reso
- 7.5 High severity
spicedb: Generation of Error Message Containing Sensitive Information
SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. The `spicedb serve` command contains a flag named `--grpc-preshared-key` which is used to protect the gRPC API from being
- 8.1 High severity
SpiceDB is a database system for managing security-critical application permissions.
SpiceDB is a database system for managing security-critical application permissions. Any user making use of a wildcard relationship under the right hand branch of an `exclusion` or within an `intersection` operation will see `Lookup`/`LookupResources` return a