tocsin

CVE-2025-49011

2 advisories.

Go/github.com/authzed/spicedb CVE-2025-49011: low 3.7

SpiceDB checks involving relations with caveats can result in no permission when permission is expected

Action: Upgrade github.com/authzed/spicedb to 1.44.2 or later.

go get github.com/authzed/spicedb@v1.44.2

Affected

introducedfixedlast affected
01.44.2-

Fixed versions

1.44.2

Sources

CVE-2025-49011 · published · modified · JSON

Go/github.com/authzed/spicedb CVE-2025-49011: unknown

SpiceDB checks involving relations with caveats can result in no permission when permission is expected in github.com/authzed/spicedb

Action: Upgrade github.com/authzed/spicedb to 1.44.2 or later.

go get github.com/authzed/spicedb@v1.44.2

Affected

introducedfixedlast affected
01.44.2-

Fixed versions

1.44.2

Sources

CVE-2025-49011 · published · modified · JSON