CVE-2025-65111

🗓️ 21 Nov 2025 22:02:52Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 6 Views

CVE-2025-65111: SpiceDB may miss LookupResources results when a union references the same relation on both sides; fixed in 1.47.1.

Reporter	Title	Published	Views	Family All 18
CNNVD	SpiceDB 安全漏洞	21 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-65111 SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results	21 Nov 202522:02	–	cvelist
EUVD	EUVD-2025-198499	21 Nov 202522:02	–	euvd
Github Security Blog	SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results	21 Nov 202518:06	–	github
NVD	CVE-2025-65111	21 Nov 202522:16	–	nvd
OSV	CVE-2025-65111 SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results	21 Nov 202522:02	–	osv
OSV	GHSA-9M7R-G8HG-X3VR SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results	21 Nov 202518:06	–	osv
OSV	GO-2025-4151 SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb	25 Nov 202518:12	–	osv
OSV	SUSE-SU-2025:4395-1 Security update for govulncheck-vulndb	15 Dec 202511:15	–	osv
Positive Technologies	PT-2025-47815	21 Nov 202500:00	–	ptsecurity

NVD

Vulners

Node

authzed spicedbRange<1.47.1

[
  {
    "vendor": "authzed",
    "product": "spicedb",
    "versions": [
      {
        "version": "< 1.47.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/authzed/spicedb/commit/8c2edbe1e7bd3851fa2138f4cc344bfde986dcf2
github	www.github.com/authzed/spicedb/security/advisories/GHSA-9m7r-g8hg-x3vr

31 Dec 2025 13:41Current

6.3Medium risk

Vulners AI Score6.3

CVSS 3.15.3

CVSS 46.3

EPSS0.00053

SSVC

CWE-277