spicedb vulnerabilities
CVEs whose affected-version data names the spicedb package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-55866Low· 3.7SpiceDB is an open source database system for creating and managing security-critical application permissions
SpiceDB is an open source database system for creating and managing security-critical application permissions. From 1.34.0 until 1.54.0, SpiceDB can return PERMISSIONSHIP_HAS_PERMISSION instead of PERMISSIONSHIP_CONDITIONAL_PERMISSION or…
▾ Sunlitauthzed · spicedbEPSS 0.34%via NVD
CVE-2025-65111Medium· 5.3SpiceDB is an open source database system for creating and managing security-critical application permissions
SpiceDB is an open source database system for creating and managing security-critical application permissions. Prior to version 1.47.1, if a schema includes the following characteristics: permission defined in terms of a union (+) and th…
▾ Sunlitauthzed · spicedbEPSS 0.23%via NVD