Affected by GO-2026-4465
and 3 other vulnerabilities
GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb
GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb
GO-2026-5465: SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logs in github.com/authzed/spicedb
GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb
Package stats provides statistics tracking for FDW query operations.
This package collects query execution statistics including cost metrics,
row counts, and result widths using quantile streams. The statistics are
used to generate accurate EXPLAIN plans and help the Postgres query planner
make better decisions.
type Package struct {
sync.Mutex// contains filtered or unexported fields
}
Package collects query execution statistics for a specific table and operation.
It uses quantile streams to track cost, row count, and result width metrics.
Explain generates an EXPLAIN plan string using collected statistics.
If no samples have been collected, returns a default plan.
TODO(jschorr): Support getting cost estimates from Materialize.