Affected by GO-2023-1723 and 5 other vulnerabilities

GO-2023-1723: SpiceDB binding metrics port to untrusted networks and can leak command-line flags in github.com/authzed/spicedb

GO-2023-2166: SpiceDB leaks information in log files when URI cannot be parsed in github.com/authzed/spicedb

GO-2024-2597: Integer overflow in chunking helper causes dispatching to miss elements or panic in github.com/authzed/spicedb

GO-2024-2716: SpiceDB: LookupSubjects may return partial results if a specific kind of relation is used in github.com/authzed/spicedb

GO-2024-2939: SpiceDB exclusions can result in no permission returned when permission expected in github.com/authzed/spicedb

GO-2024-3131: SpiceDB having multiple caveats on resources of the same type may improperly result in no permission in github.com/authzed/spicedb

internal/

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Path	Synopsis
auth
dashboard
datastore
common
crdb
crdb/migrations
memdb
options Code generated by github.com/ecordell/optgen.	Code generated by github.com/ecordell/optgen.
postgres
postgres/migrations
proxy
spanner
spanner/migrations
test
dispatch
caching
combined Package combined implements a dispatcher that combines caching, redispatching and optional cluster dispatching.	Package combined implements a dispatcher that combines caching, redispatching and optional cluster dispatching.
graph
remote
gateway Package gateway implements an HTTP server that forwards JSON requests to an upstream SpiceDB gRPC server.	Package gateway implements an HTTP server that forwards JSON requests to an upstream SpiceDB gRPC server.
graph
membership
middleware
consistency
datastore
dispatcher
handwrittenvalidation
pertoken
readonly
servicespecific
usagemetrics
namespace
services
dispatch
dispatch/v1
serviceerrors
shared
v0
v1
v1alpha1
sharederrors
testfixtures
testserver