| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2025-65111 | 2.9 LOW | PATCHED / FIX AVAILABLE | 0.22% | 2025-11-21 |
| CVE-2025-64529 | 2.7 LOW | PATCHED / FIX AVAILABLE | 0.25% | 2025-11-10 |
| CVE-2025-49011 | 3.7 LOW | PATCHED / FIX AVAILABLE | 0.32% | 2025-06-06 |
| CVE-2024-48909 | 2.0 LOW | PATCHED / FIX AVAILABLE | 0.32% | 2024-10-14 |
| CVE-2024-38361 | 3.7 LOW | PATCHED / FIX AVAILABLE | 0.40% | 2024-06-20 |
| CVE-2024-32001 | 2.2 LOW | PATCHED / FIX AVAILABLE | 0.58% | 2024-04-10 |
| CVE-2024-27101 | 7.3 HIGH | PATCHED / FIX AVAILABLE | 0.46% | 2024-03-01 |
Spicedb is an open-source, cloud-native permissions database built on Google Zanzibar-inspired design principles, providing fine-grained access control and authorization for modern applications. Its significance in cybersecurity lies in enabling scalable, consistent, and auditable authorization policies, reducing the risk of access control vulnerabilities. The product is maintained by AuthZed, a company focused on authorization infrastructure.
Based on 0 critical CVEs, 0 CISA KEV, 88% unpatched. Model: GDPR Art.83 · not legal advice.