Go/github.com/authzed/spicedb: unknown
LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb
Action: Upgrade github.com/authzed/spicedb to 1.49.1 or later.
go get github.com/authzed/spicedb@v1.49.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.49.1 | - |
Fixed versions
| 1.49.1 |
Sources
- osv: GO-2026-4465
- https://github.com/authzed/spicedb/security/advisories/GHSA-vhvq-fv9f-wh4q
- https://github.com/authzed/spicedb/commit/fa1d7f48107e0c6c35e6a7862aa983366e70208f
- https://github.com/authzed/spicedb/pull/2878
published · modified · JSON