Skip to content
Heist/ feed
UnratedFix available

spicedb v1.56.2

Type: patchSource: SpiceDB1 source record

This release fixes an issue that could expose datastore information when tracing is enabled and command-line arguments are used instead of environment variables.

Announced Source revision 1
Original source ↗

github-authzed-spicedb

Primary source · Revision 1

These are machine-extracted claims. Quotations show the recorded source text; verify the original announcement before acting.

Security context

Security Fixed an issue that exposes datastore information if tracing is enabled and if using command arguments instead of environment variables.

spicedb

Release notes from spicedb
Affected versions
Not stated in this extraction
Fixed versions
v1.56.2
v1.56.2
Prerequisites
if tracing is enabled and if using command arguments instead of environment variables
if tracing is enabled and if using command arguments instead of environment variables

Publisher severity

No explicit severity was extracted.

Event
#79103 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement