Go/github.com/authzed/spicedb CVE-2026-46668: low 2.3, EPSS 0.28%
SpiceDB: Caveat structures with nested lists can result in improper cache reuse
Action: Upgrade github.com/authzed/spicedb to 1.52.0 or later.
go get github.com/authzed/spicedb@v1.52.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.15.0 | 1.52.0 | - |
Fixed versions
| 1.52.0 |
Sources
- osv: GHSA-mqcf-gqvg-rmhm
- nvd: CVE-2026-46668
- https://github.com/authzed/spicedb/security/advisories/GHSA-mqcf-gqvg-rmhm
- https://github.com/authzed/spicedb/pull/3065
- https://github.com/authzed/spicedb
- https://github.com/authzed/spicedb/releases/tag/v1.52.0
CVE-2026-46668 · published · modified · JSON