HIGH🇵🇱 Wersja polska

CVE-2024-27101

CVSS 7.3v3.1pub. 2024-03-01upd. 2025-09-02

SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Integer overflow in chunking helper causes dispatching to miss elements or panic. Any SpiceDB cluster with any schema where a resource being checked has more than 65535 relationships for the same resource and subject type is affected by this problem. The CheckPermission, BulkCheckPermission, and LookupSubjects API methods are affected. This vulnerability is fixed in 1.29.2.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H

  • Authzed Spicedb

    APP
    Authzed
    < 1.29.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-29193HIGH8.7ten sam produkt

SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critic...

CVE-2022-21646HIGH8.1ten sam produkt

SpiceDB is a database system for managing security-critical application permissions. Any user making use of a ...

CVE-2026-40091MEDIUM6.0ten sam produkt

SpiceDB is an open source database system for creating and managing security-critical application permissions....

CVE-2023-46255MEDIUM4.2ten sam produkt

SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical appli...

CVE-2025-65111LOW2.9ten sam produkt

SpiceDB to open source'owy system bazy danych do tworzenia i zarządzania uprawnieniami krytycznymi dla bezpiec...