tocsin

CVE-2024-38361

2 advisories.

Go/github.com/authzed/spicedb CVE-2024-38361: low 3.7, EPSS 0.40%

SpiceDB exclusions can result in no permission returned when permission expected

Action: Upgrade github.com/authzed/spicedb to 1.33.1 or later.

go get github.com/authzed/spicedb@v1.33.1

Affected

introducedfixedlast affected
01.33.1-

Fixed versions

1.33.1

Sources

CVE-2024-38361 · published · modified · JSON

Go/github.com/authzed/spicedb CVE-2024-38361: unknown, EPSS 0.40%

SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb

Action: Upgrade github.com/authzed/spicedb to 1.33.1 or later.

go get github.com/authzed/spicedb@v1.33.1

Affected

introducedfixedlast affected
01.33.1-

Fixed versions

1.33.1

Sources

CVE-2024-38361 · published · modified · JSON