Affected by GO-2023-2166 and 4 other vulnerabilities

GO-2023-2166: SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb

GO-2024-2597: Integer overflow in chunking helper causes dispatching to miss elements or panic in github.com/authzed/spicedb

GO-2024-2716: SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used in github.com/authzed/spicedb

GO-2024-2939: SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb

GO-2024-3131: SpiceDB having multiple caveats on resources of the same type may improperly result in no permission in github.com/authzed/spicedb

internal/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Path	Synopsis
auth
caveats
dashboard
datasets
datastore
common
common/revisions
crdb
crdb/migrations
memdb
mysql
mysql/migrations
options Code generated by github.com/ecordell/optgen.	Code generated by github.com/ecordell/optgen.
postgres
postgres/common
postgres/migrations
postgres/version
proxy
proxy/proxy_test
spanner
spanner/migrations
developmentmembership
dispatch
caching
cluster
combined Package combined implements a dispatcher that combines caching, redispatching and optional cluster dispatching.	Package combined implements a dispatcher that combines caching, redispatching and optional cluster dispatching.
graph
keys
remote
gateway Package gateway implements an HTTP server that forwards JSON requests to an upstream SpiceDB gRPC server.	Package gateway implements an HTTP server that forwards JSON requests to an upstream SpiceDB gRPC server.
graph
computed
logging
middleware
consistency
datastore
dispatcher
handwrittenvalidation
pertoken
readonly
servicespecific
streamtimeout
usagemetrics
namespace
relationships
services
dispatch
dispatch/v1
health
integrationtesting/consistencytestutil
shared
v0
v1
sharederrors
telemetry Package telemetry implements a client for reporting telemetry data used to prioritize development of SpiceDB.	Package telemetry implements a client for reporting telemetry data used to prioritize development of SpiceDB.
testfixtures
testserver
testutil