Go/github.com/authzed/spicedb: low
LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic
Action: Upgrade github.com/authzed/spicedb to 1.49.1 or later.
go get github.com/authzed/spicedb@v1.49.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.29.3 | 1.49.1 | - |
Fixed versions
| 1.49.1 |
Sources
- osv: GHSA-vhvq-fv9f-wh4q
- https://github.com/authzed/spicedb/security/advisories/GHSA-vhvq-fv9f-wh4q
- https://github.com/authzed/spicedb/pull/2878
- https://github.com/authzed/spicedb/commit/fa1d7f48107e0c6c35e6a7862aa983366e70208f
- https://github.com/authzed/spicedb
published · modified · JSON