GO-2026-4465: LookupResources Cursor section tampering can crash SpiceDB process via tuple.MustParse panic in github.com/authzed/spicedb

  GO-2026-5133: SpiceDB: Checks involving relations with caveats can result in unconditional permission when conditional permission is expected in github.com/authzed/spicedb

  GO-2026-5465: SpiceDB's SPICEDB_DATASTORE_CONN_URI is leaked on startup logs in github.com/authzed/spicedb

  GO-2026-5514: SpiceDB: Caveat structures with nested lists can result in improper cache reuse in github.com/authzed/spicedb