Vulnerabilities in authzed
14 resultsVexday analysis
AuthZed apresenta perfil de risco moderado com 14 CVEs catalogadas, nenhuma atualmente sob exploração ativa (KEV). A fraqueza dominante é CWE-532 (exposição de informações sensíveis em logs), evidenciando problemas de tratamento de dados; destaca-se que nenhuma vulnerabilidade foi classificada como crítica. O risco permanece contido, com apenas 1 vulnerabilidade publicada nos últimos 90 dias, indicando que a superfície de ataque não está em expansão acelerada.
CVE-2022-21646HIGHLookup operations do not take into account wildcards in SpiceDBEPSS 1.3%CVE-2023-29193HIGHSpiceDB binding metrics port to untrusted networks and can leak command-line flagsEPSS 0.8%CVE-2024-32001LOWSpiceDB: LookupSubjects may return partial results if a specific kind of relation is usedEPSS 0.6%CVE-2024-27101HIGHInteger overflow in chunking helper causes dispatching to miss elements or panicEPSS 0.5%CVE-2023-35930LOWLookupResources may return partial results in spicedbEPSS 0.4%CVE-2024-38361LOWPermissions processing error in spacedbEPSS 0.4%CVE-2023-46255MEDIUM`SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsedEPSS 0.4%CVE-2024-48909LOWSpiceDB calls to LookupResources using LookupResources2 with caveats may return context is missing when it is notEPSS 0.3%CVE-2024-46989LOWMultiple caveats on resources of the same type can result in no permission when permission is expectedEPSS 0.3%CVE-2026-46668LOWSpiceDB: Caveat structures with nested lists can result in improper cache reuseEPSS 0.3%CVE-2025-49011LOWSpiceDB checks involving relations with caveats can result in no permission when permission is expectedEPSS 0.3%CVE-2025-64529LOWSpiceDB's WriteRelationships fails silently if payload is too bigEPSS 0.2%CVE-2025-65111LOWSpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete ResultsEPSS 0.2%CVE-2026-40091MEDIUMSpiceDB: SPICEDB_DATASTORE_CONN_URI is leaked on startup logsEPSS 0.2%