Skip to content
Surrealdb vulnerabilities
Newest
-
surrealdb
SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value Serialization
CVE-2026-121423
7.1 High
-
surrealdb
SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass
CVE-2026-121422
5.1 Medium
-
surrealdb
SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypass
CVE-2026-121421
5.3 Medium
-
surrealdb
SurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition Addresses
CVE-2026-121420
4.8 Medium
-
surrealdb
SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject Collision
CVE-2026-121419
8.6 High
-
surrealdb
SurrealDB 3.1.0 before 3.3.0 Incorrect Authorization via Streaming Index Planner
CVE-2026-121418
5.3 Medium
-
surrealdb
SurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style Invocations
CVE-2026-121416
7.1 High
-
surrealdb
SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV Backends
CVE-2026-121417
Fix available
8.8 High
-
surrealdb
SurrealDB before 3.3.0 Cross-Tenant Access via USE Statement
CVE-2026-109343
8.6 High
-
surrealdb
SurrealDB 3.0.0 before 3.3.0 Missing Authentication in revoke RPC Method
CVE-2026-109342
5.3 Medium
-
surrealdb
SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operations
CVE-2026-109341
7.1 High
-
surrealdb
SurrealDB 3.1.0 before 3.3.0 Authorization Bypass via REFERENCE ON DELETE CASCADE
CVE-2026-109340
5.3 Medium
-
surrealdb, surrealdb surrealism-runtime +1 more
SurrealDB 3.1.0 before 3.3.0 Memory Exhaustion via Surrealism Module Output Buffering
CVE-2026-109339
6.9 Medium
-
surrealdb
SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Values
CVE-2026-109338
7.1 High
-
surrealdb
SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE Clause
CVE-2026-109337
5.3 Medium
-
surrealdb
SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT $before/$after
CVE-2026-109336
5.3 Medium
-
surrealdb
SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fields
CVE-2026-109335
7.1 High
-
surrealdb
SurrealDB before 3.3.0 Cross-Tenant Access via Surreal-NS/Surreal-DB Headers and RPC use
CVE-2026-109334
8.6 High
-
surrealdb
SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCH
CVE-2026-109333
7.1 High
-
surrealdb
SurrealDB before 3.3.0 Cross-Tenant Access via Headers
CVE-2026-102876
8.6 High
-
surrealdb
SurrealDB before 3.1.4 Array Element Permission Bypass
CVE-2026-63740
Fix available
7.1 High
-
surrealdb
SurrealDB before 3.2.0 SSRF via JWKS URL hostname resolution
CVE-2026-63736
5.1 Medium
-
surrealdb
SurrealDB before 3.2.0 Authentication Bypass via Custom API
CVE-2026-63735
Fix available
8.6 High
-
surrealdb
SurrealDB before 3.2.0 Denial of Service via malformed SurrealML import
CVE-2026-63734
6.9 Medium
-
surrealdb
SurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS Clause
CVE-2026-63733
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 2.3.6 deny-net Bypass via DNS Resolution
CVE-2025-71390
Fix available
5.8 Medium
-
surrealdb
SurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deleted
CVE-2026-49997
Fix available
5.4 Medium
-
surrealdb
SurrealDB before 3.1.0 Algorithm Downgrade via ES512
CVE-2026-63761
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 3.1.0 Field Permission Bypass via Indexed COUNT
CVE-2026-63742
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 3.1.0 Authentication Bypass via USE statement
CVE-2026-63741
Fix available
6.9 Medium
-
surrealdb
SurrealDB before 3.1.0 Port-Specific Deny Rule Bypass via HTTP Redirect
CVE-2026-63743
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 3.1.0 Authentication Bypass via LIVE SELECT
CVE-2026-63749
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 3.1.0 RELATE Statement Record Overwrite
CVE-2026-63752
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 3.1.0 Field Permission Bypass via JSON Patch
CVE-2026-63751
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 3.1.0 Information Disclosure via Error Messages
CVE-2026-63748
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 3.1.0 Authentication Bypass via LIVE Query
CVE-2026-63753
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 3.1.0 Memory Amplification via /sql WebSocket
CVE-2026-63750
Fix available
6.9 Medium
-
surrealdb
SurrealDB before 3.1.0 Authorization Bypass via KILL Statement
CVE-2026-63758
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 3.1.0 Denial of Service via LIVE Query
CVE-2026-63754
Fix available
7.1 High
-
surrealdb
SurrealDB before 3.1.0 Authorization Bypass via Composite Record-id
CVE-2026-63745
Fix available
5.3 Medium
-
surrealdb
SurrealDB before 3.1.0 Permission Bypass via Graph Traversal
CVE-2026-63746
Fix available
7.1 High
-
surrealdb
SurrealDB before 3.1.0 Permission Bypass via WHERE Clause
CVE-2026-63755
Fix available
7.1 High
-
surrealdb
SurrealDB before 3.1.0 Denial of Service nested type annotations
CVE-2026-63759
Fix available
7.1 High
-
surrealdb
SurrealDB before 3.1.0 Denial of Service via malformed RPC use
CVE-2026-63747
Fix available
8.7 High
-
surrealdb
SurrealDB before 3.1.0 Denial of Service via JSON Parser
CVE-2026-63760
Fix available
8.7 High
-
surrealdb
SurrealDB before 3.1.0 Privilege Escalation via RPC Session Race Condition
CVE-2026-63756
Fix available
9.2 Critical
-
surrealdb
SurrealDB before 3.1.0 Session Hijacking via /rpc sessions
CVE-2026-63757
Fix available
8.7 High
-
surrealdb
SurrealDB before 3.1.5 Denial of Service via deep operator chains
CVE-2026-63737
Fix available
7.1 High
-
surrealdb
SurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via Traversal
CVE-2026-63738
Fix available
5.3 Medium
-
surrealdb
SurrealDB < 3.1.5 Information Disclosure via ORDER BY
CVE-2026-63309
Fix available
5.3 Medium
- Show olderLoading…