{"id":"GO-2025-4151","revision":"518fb3ffd58144fdab12b116626f0f91","records":[{"revision":"518fb3ffd58144fdab12b116626f0f91","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4151","aliases":["CVE-2025-65111","GHSA-9m7r-g8hg-x3vr"],"title":"SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb","description":"SpiceDB: LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results in github.com/authzed/spicedb","state":0,"publishedAt":"2025-11-25T18:12:18+00:00","modifiedAt":"2026-03-03T04:57:40.807148+00:00","affected":[{"ecosystem":"Go","name":"github.com/authzed/spicedb","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.47.1"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/authzed/spicedb/security/advisories/GHSA-9m7r-g8hg-x3vr","https://github.com/authzed/spicedb/commit/8c2edbe1e7bd3851fa2138f4cc344bfde986dcf2"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4151","license":"OSV · upstream source license applies","key":"osv:GO-2025-4151","identifiers":["GO-2025-4151","CVE-2025-65111","GHSA-9m7r-g8hg-x3vr"]},"retained":false,"historicalAffected":[]}],"coverage":[]}