Affected by GO-2023-1723 and 5 other vulnerabilities

GO-2023-1723: SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb

GO-2023-2166: SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb

GO-2024-2597: Integer overflow in chunking helper causes dispatching to miss elements or panic in github.com/authzed/spicedb

GO-2024-2716: SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used in github.com/authzed/spicedb

GO-2024-2939: SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb

GO-2024-3131: SpiceDB having multiple caveats on resources of the same type may improperly result in no permission in github.com/authzed/spicedb

pkg/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Path	Synopsis
consistent
graph
membership
migrate
namespace
schemadsl
compiler
dslshape Package dslshape defines the types representing the structure of schema DSL.	Package dslshape defines the types representing the structure of schema DSL.
generator
input
lexer
parser parser package defines the parser for the Authzed Schema DSL.	parser package defines the parser for the Authzed Schema DSL.
secrets
tuple
validation
validationfile
x509util
zedtoken Package zedtoken converts decimal.Decimal to zedtoken and vice versa	Package zedtoken converts decimal.Decimal to zedtoken and vice versa
zookie Package zookie converts integers to zookies and vice versa	Package zookie converts integers to zookies and vice versa