Skip to contentSurrealdb Surrealdb vulnerabilities
- surrealdbSurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value SerializationCVE-2026-1214237.1 High
- surrealdbSurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port BypassCVE-2026-1214225.1 Medium
- surrealdbSurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing BypassCVE-2026-1214215.3 Medium
- surrealdbSurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition AddressesCVE-2026-1214204.8 Medium
- surrealdbSurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject CollisionCVE-2026-1214198.6 High
- surrealdbSurrealDB 3.1.0 before 3.3.0 Incorrect Authorization via Streaming Index PlannerCVE-2026-1214185.3 Medium
- surrealdbSurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style InvocationsCVE-2026-1214167.1 High
- surrealdbSurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV BackendsCVE-2026-121417Fix available8.8 High
- surrealdbSurrealDB before 3.3.0 Cross-Tenant Access via USE StatementCVE-2026-1093438.6 High
- surrealdbSurrealDB 3.0.0 before 3.3.0 Missing Authentication in revoke RPC MethodCVE-2026-1093425.3 Medium
- surrealdbSurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test OperationsCVE-2026-1093417.1 High
- surrealdbSurrealDB 3.1.0 before 3.3.0 Authorization Bypass via REFERENCE ON DELETE CASCADECVE-2026-1093405.3 Medium
- surrealdb, surrealdb surrealism-runtime +1 moreSurrealDB 3.1.0 before 3.3.0 Memory Exhaustion via Surrealism Module Output BufferingCVE-2026-1093396.9 Medium
- surrealdbSurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII ValuesCVE-2026-1093387.1 High
- surrealdbSurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE ClauseCVE-2026-1093375.3 Medium
- surrealdbSurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT $before/$afterCVE-2026-1093365.3 Medium
- surrealdbSurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED FieldsCVE-2026-1093357.1 High
- surrealdbSurrealDB before 3.3.0 Cross-Tenant Access via Surreal-NS/Surreal-DB Headers and RPC useCVE-2026-1093348.6 High
- surrealdbSurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCHCVE-2026-1093337.1 High
- surrealdbSurrealDB before 3.3.0 Cross-Tenant Access via HeadersCVE-2026-1028768.6 High
- surrealdbSurrealDB before 3.1.4 Array Element Permission BypassCVE-2026-63740Fix available7.1 High
- surrealdbSurrealDB before 3.2.0 SSRF via JWKS URL hostname resolutionCVE-2026-637365.1 Medium
- surrealdbSurrealDB before 3.2.0 Authentication Bypass via Custom APICVE-2026-63735Fix available8.6 High
- surrealdbSurrealDB before 3.2.0 Denial of Service via malformed SurrealML importCVE-2026-637346.9 Medium
- surrealdbSurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS ClauseCVE-2026-63733Fix available5.3 Medium
- surrealdbSurrealDB before 2.3.6 deny-net Bypass via DNS ResolutionCVE-2025-71390Fix available5.8 Medium
- surrealdbSurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deletedCVE-2026-49997Fix available5.4 Medium
- surrealdbSurrealDB before 3.1.0 Algorithm Downgrade via ES512CVE-2026-63761Fix available5.3 Medium
- surrealdbSurrealDB before 3.1.0 Field Permission Bypass via Indexed COUNTCVE-2026-63742Fix available5.3 Medium
- surrealdbSurrealDB before 3.1.0 Authentication Bypass via USE statementCVE-2026-63741Fix available6.9 Medium
- surrealdbSurrealDB before 3.1.0 Port-Specific Deny Rule Bypass via HTTP RedirectCVE-2026-63743Fix available5.3 Medium
- surrealdbSurrealDB before 3.1.0 Authentication Bypass via LIVE SELECTCVE-2026-63749Fix available5.3 Medium
- surrealdbSurrealDB before 3.1.0 RELATE Statement Record OverwriteCVE-2026-63752Fix available5.3 Medium
- surrealdbSurrealDB before 3.1.0 Field Permission Bypass via JSON PatchCVE-2026-63751Fix available5.3 Medium
- surrealdbSurrealDB before 3.1.0 Information Disclosure via Error MessagesCVE-2026-63748Fix available5.3 Medium
- surrealdbSurrealDB before 3.1.0 Authentication Bypass via LIVE QueryCVE-2026-63753Fix available5.3 Medium
- surrealdbSurrealDB before 3.1.0 Memory Amplification via /sql WebSocketCVE-2026-63750Fix available6.9 Medium
- surrealdbSurrealDB before 3.1.0 Authorization Bypass via KILL StatementCVE-2026-63758Fix available5.3 Medium
- surrealdbSurrealDB before 3.1.0 Denial of Service via LIVE QueryCVE-2026-63754Fix available7.1 High
- surrealdbSurrealDB before 3.1.0 Authorization Bypass via Composite Record-idCVE-2026-63745Fix available5.3 Medium
- surrealdbSurrealDB before 3.1.0 Permission Bypass via Graph TraversalCVE-2026-63746Fix available7.1 High
- surrealdbSurrealDB before 3.1.0 Permission Bypass via WHERE ClauseCVE-2026-63755Fix available7.1 High
- surrealdbSurrealDB before 3.1.0 Denial of Service nested type annotationsCVE-2026-63759Fix available7.1 High
- surrealdbSurrealDB before 3.1.0 Denial of Service via malformed RPC useCVE-2026-63747Fix available8.7 High
- surrealdbSurrealDB before 3.1.0 Denial of Service via JSON ParserCVE-2026-63760Fix available8.7 High
- surrealdbSurrealDB before 3.1.0 Privilege Escalation via RPC Session Race ConditionCVE-2026-63756Fix available9.2 Critical
- surrealdbSurrealDB before 3.1.0 Session Hijacking via /rpc sessionsCVE-2026-63757Fix available8.7 High
- surrealdbSurrealDB before 3.1.5 Denial of Service via deep operator chainsCVE-2026-63737Fix available7.1 High
- surrealdbSurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via TraversalCVE-2026-63738Fix available5.3 Medium
- surrealdbSurrealDB < 3.1.5 Information Disclosure via ORDER BYCVE-2026-63309Fix available5.3 Medium
- Show moreLoading…