VulertSecurity VulertSecurity

Vulnerability Database · Go · github.com/authzed/spicedb · Version

github.com/authzed/spicedb v1.57.0

v1.57.0 is affected by 19 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 2 Medium 3 Low 4 Unrated 10

All github.com/authzed/spicedb versions & vulnerabilities → Source repository Search the database for this package →
Released 20 Oct 2026 Status latest release Licence Apache-2.0 Also known from other sources 0 Newer releases 300 Database updated 23/Oct/2026

Release and licence data published by the Go module proxy. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

github.com/authzed/spicedb v1.57.0 vulnerabilities

19 vulnerabilities cover github.com/authzed/spicedb v1.57.0. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2023-29193: Open Source Vulnerability in github.com/authzed/spicedb - SpiceDB binding metrics port can leak command-line flags 8.1 high 1.19.1 13 Apr 2023
CVE-2024-27101: Integer overflow in chunking helper causes dispatching to miss elements or panic in github.com/authzed/spicedb 7.3 high 1.29.2 01 Mar 2024
CVE-2023-46255: Password Leakage in github.com/authzed/spicedb 4.2 medium 1.27.0-rc1 31 Oct 2023
CVE-2025-49011: SpiceDB Permission Check Failure Due to Caveated Relations 3.7 low 1.44.2 06 Jun 2025
CVE-2024-46989: SpiceDB Improper Permission Handling Due to Multiple Caveats 3.7 medium 1.35.3 18 Sep 2024
SpiceDB Exclusions Can Result in No Permission Returned 3.7 medium 1.33.1 20 Jun 2024
CVE-2025-65111: SpiceDB Incomplete LookupResources Results Due to Permission Schema Issue 2.9 low 1.47.1 21 Nov 2025
CVE-2025-64529: SpiceDB WriteRelationships Silent Failure on Large Payloads 2.7 low 1.45.2 13 Nov 2025
CVE-2024-32001: Open Source Vulnerability in github.com/authzed/spicedb 2.2 low 1.30.1 10 Apr 2024
SpiceDB Vulnerability: Cursor Section Tampering Leading to Process Crash N/A unrated 1.49.1 17 Feb 2026
CVE-2025-65111: SpiceDB Incomplete Results from LookupResources with Multiple Entrypoints N/A unrated 1.47.1 25 Nov 2025
CVE-2025-64529: SpiceDB WriteRelationships Silent Failure Due to Payload Size N/A unrated 1.45.2 17 Nov 2025
CVE-2025-49011: SpiceDB Permission Check Failure Due to Caveats N/A unrated 1.44.2 10 Jun 2025
SpiceDB Vulnerability: Improper Permission Handling Due to Multiple Caveats N/A unrated 1.35.3 25 Sep 2024
CVE-2023-46255: Information Leakage in SpiceDB N/A unrated 1.27.0-rc1 21 Aug 2024
CVE-2023-29193: SpiceDB binding metrics port leakage in github.com/authzed/spicedb N/A unrated 1.19.1 20 Aug 2024
CVE-2024-38361: SpiceDB exclusions can result in no permission returned N/A unrated 1.33.1 28 Jun 2024
CVE-2024-32001: SpiceDB: LookupSubjects may return partial results N/A unrated 1.30.1 04 Jun 2024
CVE-2024-27101: Integer overflow in chunking helper causes dispatching to miss elements or panic in github.com/authzed/spicedb N/A unrated 1.29.2 04 Jun 2024

Looking for another version, or everything Vulert holds for github.com/authzed/spicedb?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/authzed/spicedb v1.57.0

Is github.com/authzed/spicedb v1.57.0 vulnerable?

Yes. 19 vulnerabilities in the Vulert database cover github.com/authzed/spicedb v1.57.0: 0 critical, 2 high, 3 medium and 4 low, plus 10 not yet rated. Each entry above names the fixed version to move to.

Is v1.57.0 the latest release of github.com/authzed/spicedb?

Yes. v1.57.0 is the current release, published 20 Oct 2026. Staying on the current line is what keeps you inside the publisher's fixes.

How do I monitor github.com/authzed/spicedb for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/authzed/spicedb version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.