surrealdb vulnerabilities (crates.io)
55 vulnerabilities.
-
surrealdbcrates.io SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV Backends 8.8 High -
surrealdbcrates.io SurrealDB before 3.1.4 Array Element Permission Bypass 7.1 High -
surrealdbcrates.io SurrealDB before 3.2.0 Authentication Bypass via Custom API 8.6 High -
surrealdbcrates.io SurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deleted 5.4 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Algorithm Downgrade via ES512 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Field Permission Bypass via Indexed COUNT 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Authentication Bypass via USE statement 6.9 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Port-Specific Deny Rule Bypass via HTTP Redirect 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Authentication Bypass via LIVE SELECT 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 RELATE Statement Record Overwrite 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Field Permission Bypass via JSON Patch 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Information Disclosure via Error Messages 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Authentication Bypass via LIVE Query 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Memory Amplification via /sql WebSocket 6.9 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Authorization Bypass via KILL Statement 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Denial of Service via LIVE Query 7.1 High -
surrealdbcrates.io SurrealDB before 3.1.0 Authorization Bypass via Composite Record-id 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.0 Permission Bypass via Graph Traversal 7.1 High -
surrealdbcrates.io SurrealDB before 3.1.0 Permission Bypass via WHERE Clause 7.1 High -
surrealdbcrates.io SurrealDB before 3.1.0 Denial of Service nested type annotations 7.1 High -
surrealdbcrates.io SurrealDB before 3.1.0 Denial of Service via malformed RPC use 8.7 High -
surrealdbcrates.io SurrealDB before 3.1.0 Denial of Service via JSON Parser 8.7 High -
surrealdbcrates.io SurrealDB before 3.1.0 Privilege Escalation via RPC Session Race Condition 9.2 Critical -
surrealdbcrates.io SurrealDB before 3.1.0 Session Hijacking via /rpc sessions 8.7 High -
surrealdbcrates.io SurrealDB before 3.1.5 Denial of Service via deep operator chains 7.1 High -
surrealdbcrates.io SurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via Traversal 5.3 Medium -
surrealdbcrates.io SurrealDB < 3.1.5 Information Disclosure via ORDER BY 5.3 Medium -
surrealdbcrates.io SurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZER 8.3 High -
surrealdbcrates.io SurrealDB before 3.1.5 SSRF via JWKS URL Redirect 5.1 Medium -
surrealdbcrates.io SurrealDB before v2.6.1 Denial of Service via scripting 6.0 Medium -
surrealdbcrates.io SurrealDB before 2.5.0 Privilege Escalation via Future Fields 7.5 High -
surrealdbcrates.io SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass 5.8 Medium -
surrealdbcrates.io SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops 7.1 High -
surrealdbcrates.io SurrealDB before 2.2.2 Denial of Service via JavaScript Scripting 2.3 Low -
surrealdbcrates.io SurrealDB before 2.2.2 Memory Exhaustion via string::replace 7.1 High -
surrealdbcrates.io SurrealDB before 2.2.2 SurrealQL Injection via export 9.4 Critical -
surrealdbcrates.io SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER 2.3 Low -
surrealdbcrates.io SurrealDB before 2.2.2 Memory Exhaustion via Nested Functions 6.0 Medium -
surrealdbcrates.io SurrealDB before 2.2.2 Denial of Service via /sql endpoint 7.1 High -
surrealdbcrates.io SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE 2.3 Low -
surrealdbcrates.io SurrealDB before 2.1.0 Denial of Service via rand() Sorting 7.1 High -
surrealdbcrates.io SurrealDB before 2.1.0 Denial of Service via Nonexistent Role 6.9 Medium -
surrealdbcrates.io SurrealDB before 2.1.0 Denial of Service via rand::time() 7.1 High -
surrealdbcrates.io SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions 7.1 High -
surrealdbcrates.io SurrealDB before 2.0.4 Denial of Service via Parser Exception 7.1 High -
surrealdbcrates.io SurrealDB before 1.5.5 Query Injection via RPC API 8.7 High -
surrealdbcrates.io SurrealDB before 1.5.4 Authentication Bypass via Database Switch 5.3 Medium -
surrealdbcrates.io SurrealDB before 1.1.1 Format String via Scripting Functions 9.0 Critical -
surrealdbcrates.io SurrealDB before 1.2.0 Denial of Service via Nonexistent Function 7.1 High -
surrealdbcrates.io SurrealDB before 1.2.1 Denial of Service via Parsing Error 7.1 High - Show olderLoading…