Surrealdb vulnerabilities
77 CVEs and advisories name Surrealdb as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-58370SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service
- CVE-2024-58369SurrealDB before 1.1.1 Denial of Service via Global Parameters
- CVE-2024-58368SurrealDB before 1.1.0 Denial of Service via HTTP Headers
- CVE-2024-58367SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions
- CVE-2024-58366SurrealDB before 1.1.1 Format String via Scripting Functions
- CVE-2024-58365SurrealDB before 1.2.0 Denial of Service via Nonexistent Function
- CVE-2024-58364SurrealDB before 1.2.1 Denial of Service via Parsing Error
- CVE-2024-58363SurrealDB before 1.5.4 Authentication Bypass via Database Switch
- CVE-2024-58362SurrealDB before 1.5.5 Query Injection via RPC API
- CVE-2024-58361SurrealDB before 2.0.4 Denial of Service via Parser Exception
- CVE-2024-58359SurrealDB before 2.1.0 Denial of Service via rand() Sorting
- CVE-2024-58358SurrealDB before 2.1.0 Denial of Service via Nonexistent Role
- CVE-2024-58357SurrealDB before 2.1.0 Denial of Service via rand::time()
- CVE-2024-58356SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE
- CVE-2023-54366SurrealDB before 1.0.1 Insecure Default Table Permissions
- CVE-2026-63309SurrealDB < 3.1.5 Information Disclosure via ORDER BY
- CVE-2026-49997SurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deleted