Skip to contentSurrealdb vulnerabilities
Newest
- surrealdbSurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZERCVE-2026-63739Fix available8.3 High
- surrealdbSurrealDB before 3.1.5 SSRF via JWKS URL RedirectCVE-2026-63744Fix available5.1 Medium
- surrealdbSurrealDB before v2.6.1 Denial of Service via scriptingCVE-2026-63762Fix available6.0 Medium
- surrealdbSurrealDB before 2.5.0 Privilege Escalation via Future FieldsCVE-2026-63763Fix available7.5 High
- surrealdbSurrealDB before 2.2.2 SSRF via HTTP Redirect BypassCVE-2025-71398Fix available5.8 Medium
- surrealdbSurrealDB before 2.2.2 CPU Exhaustion via nested FOR loopsCVE-2025-71397Fix available7.1 High
- surrealdbSurrealDB before 2.2.2 Denial of Service via JavaScript ScriptingCVE-2025-71396Fix available2.3 Low
- surrealdbSurrealDB before 2.2.2 Memory Exhaustion via string::replaceCVE-2025-71395Fix available7.1 High
- surrealdbSurrealDB before 2.2.2 SurrealQL Injection via exportCVE-2025-71392Fix available9.4 Critical
- surrealdbSurrealDB before 2.2.2 Local File Read via DEFINE ANALYZERCVE-2025-71394Fix available2.3 Low
- surrealdbSurrealDB before 2.2.2 Memory Exhaustion via Nested FunctionsCVE-2025-71393Fix available6.0 Medium
- surrealdbSurrealDB before 2.2.2 Denial of Service via /sql endpointCVE-2025-71391Fix available7.1 High
- surrealdbSurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITECVE-2024-58356Fix available2.3 Low
- surrealdbSurrealDB before 2.1.0 Denial of Service via rand() SortingCVE-2024-58359Fix available7.1 High
- surrealdbSurrealDB before 2.1.0 Denial of Service via Nonexistent RoleCVE-2024-58358Fix available6.9 Medium
- surrealdbSurrealDB before 2.1.0 Denial of Service via rand::time()CVE-2024-58357Fix available7.1 High
- surrealdbSurrealDB before 2.0.4 Improper Authorization via SELECT PermissionsCVE-2024-58367Fix available7.1 High
- surrealdbSurrealDB before 2.0.4 Denial of Service via Parser ExceptionCVE-2024-58361Fix available7.1 High
- surrealdbSurrealDB before 1.5.5 Query Injection via RPC APICVE-2024-58362Fix available8.7 High
- surrealdb, surrealdb surrealdb-core +1 moreSurrealDB before 1.5.4 Authentication Bypass via Database SwitchCVE-2024-58363Fix available5.3 Medium
- delskayn rquickjs, surrealdb +1 moreSurrealDB before 1.1.1 Format String via Scripting FunctionsCVE-2024-58366Fix available9.0 Critical
- surrealdbSurrealDB before 1.2.0 Denial of Service via Nonexistent FunctionCVE-2024-58365Fix available7.1 High
- surrealdbSurrealDB before 1.2.1 Denial of Service via Parsing ErrorCVE-2024-58364Fix available7.1 High
- surrealdbSurrealDB before 1.1.0 Uncontrolled Recursion Denial of ServiceCVE-2024-58370Fix available7.1 High
- surrealdbSurrealDB before 1.1.0 Denial of Service via HTTP HeadersCVE-2024-58368Fix available8.7 High
- surrealdbSurrealDB before 1.1.1 Denial of Service via Global ParametersCVE-2024-58369Fix available7.1 High
- surrealdbSurrealDB before 1.0.1 Insecure Default Table PermissionsCVE-2023-54366Fix available8.7 High