https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 21:53:12 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-161749 EUVD-2026-161749 https://cve.radiocsirt.org/vuln/euvd-2026-161749 https://cve.radiocsirt.org/vuln/fkie_cve-2023-46255 <p>SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Prior to version 1.27.0-rc1, when the provided datastore URI is malformed (e.g. by having a password which contains `:`) the full URI (including the provided password) is printed, so that the password is shown in the logs. Version 1.27.0-rc1 patches this issue.</p> <p>SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. Prior to version 1.27.0-rc1, when the provided datastore URI is malformed (e.g. by having a password which contains `:`) the full URI (including the provided password) is printed, so that the password is shown in the logs. Version 1.27.0-rc1 patches this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-46255 https://cve.radiocsirt.org/vuln/ghsa-jg7w-cxjv-98c2 <p><strong>Affected:</strong> Go: github.com/authzed/spicedb</p> <p>SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. When the provided datastore URI is malformed (e.g. by having a password which contains `:`) the full URI (including the provided password) is printed, so that the password is shown in the logs. Version 1.27.0-rc1 patches this issue.</p> <p>Example output: ``` terminated with errors error=&#34;unable to create migration driver for postgres: parse \&#34;postgres://spicedb:&lt;PASSWORD IN PLAINTEXT&gt;&#34;: invalid port \&#34;&lt;PASSWORD IN PLAINTEXT&gt;\&#34; after host&#34; ```</p> <p><strong>Affected:</strong> Go: github.com/authzed/spicedb</p> <p>SpiceDB is an open source, Google Zanzibar-inspired database for creating and managing security-critical application permissions. When the provided datastore URI is malformed (e.g. by having a password which contains `:`) the full URI (including the provided password) is printed, so that the password is shown in the logs. Version 1.27.0-rc1 patches this issue.</p> <p>Example output: ``` terminated with errors error=&#34;unable to create migration driver for postgres: parse \&#34;postgres://spicedb:&lt;PASSWORD IN PLAINTEXT&gt;&#34;: invalid port \&#34;&lt;PASSWORD IN PLAINTEXT&gt;\&#34; after host&#34; ```</p> https://cve.radiocsirt.org/vuln/ghsa-jg7w-cxjv-98c2 https://cve.radiocsirt.org/vuln/gsd-2023-46255 gsd-2023-46255 https://cve.radiocsirt.org/vuln/gsd-2023-46255