https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 20:30:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-195518 EUVD-2026-195518 https://cve.radiocsirt.org/vuln/euvd-2026-195518 https://cve.radiocsirt.org/vuln/fkie_cve-2024-48909 <p>SpiceDB is an open source database for scalably storing and querying fine-grained authorization data. Starting in version 1.35.0 and prior to version 1.37.1, clients that have enabled `LookupResources2` and have caveats in the evaluation path for their requests can return a permissionship of `CONDITIONAL` with context marked as missing, even then the context was supplied. LookupResources2 is the new default in SpiceDB 1.37.0 and has been opt-in since SpiceDB 1.35.0. The bug is patched as part of SpiceDB 1.37.1. As a workaround, disable LookupResources2 via the `--enable-experimental-lookup-resources` flag by setting it to `false`.</p> <p>SpiceDB is an open source database for scalably storing and querying fine-grained authorization data. Starting in version 1.35.0 and prior to version 1.37.1, clients that have enabled `LookupResources2` and have caveats in the evaluation path for their requests can return a permissionship of `CONDITIONAL` with context marked as missing, even then the context was supplied. LookupResources2 is the new default in SpiceDB 1.37.0 and has been opt-in since SpiceDB 1.35.0. The bug is patched as part of SpiceDB 1.37.1. As a workaround, disable LookupResources2 via the `--enable-experimental-lookup-resources` flag by setting it to `false`.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-48909 https://cve.radiocsirt.org/vuln/ghsa-3c32-4hq9-6wgj <p><strong>Affected:</strong> Go: github.com/authzed/spicedb</p> <p>### Impact</p> <p>Clients that have enabled `LookupResources2` and have caveats in the evaluation path for their requests can return a permissionship of `CONDITIONAL` with context marked as missing, even then the context was supplied.</p> <p>LookupResources2 is the new default in SpiceDB 1.37.0 and has been opt-in since SpiceDB 1.35.0</p> <p>### Patches The bug will be released as part of SpiceDB 1.37.1</p> <p>### Workarounds Disable LookupResources2 via the `--enable-experimental-lookup-resources` flag by setting it to `false`</p> <p>``` --enable-experimental-lookup-resources=false ```</p> <p><strong>Affected:</strong> Go: github.com/authzed/spicedb</p> <p>### Impact</p> <p>Clients that have enabled `LookupResources2` and have caveats in the evaluation path for their requests can return a permissionship of `CONDITIONAL` with context marked as missing, even then the context was supplied.</p> <p>LookupResources2 is the new default in SpiceDB 1.37.0 and has been opt-in since SpiceDB 1.35.0</p> <p>### Patches The bug will be released as part of SpiceDB 1.37.1</p> <p>### Workarounds Disable LookupResources2 via the `--enable-experimental-lookup-resources` flag by setting it to `false`</p> <p>``` --enable-experimental-lookup-resources=false ```</p> https://cve.radiocsirt.org/vuln/ghsa-3c32-4hq9-6wgj https://cve.radiocsirt.org/vuln/opensuse-su-2024:0350-1 <p>Security update for govulncheck-vulndb</p> <p>Security update for govulncheck-vulndb</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:0350-1 https://cve.radiocsirt.org/vuln/suse-su-2024:3911-1 <p>Security update for govulncheck-vulndb</p> <p>Security update for govulncheck-vulndb</p> https://cve.radiocsirt.org/vuln/suse-su-2024:3911-1