Vulnerabilities in surrealdb

57 results
Vexday analysis

O SurrealDB apresenta um panorama de risco elevado com 57 vulnerabilidades identificadas, todas publicadas nos últimos 90 dias, indicando descobertas recentes em massa. Embora apenas 3 sejam críticas e nenhuma esteja sob ataque ativo no momento, a predominância de falhas de tratamento de exceções (CWE-248) sugere deficiências estruturais no tratamento de erros que podem ser exploradas. A concentração temporal das divulgações aponta para um produto em fase de escrutínio intenso, exigindo monitoramento contínuo e priorização das mitigações críticas.

CVE-2024-58368HIGHSurrealDB before 1.1.0 Denial of Service via HTTP HeadersEPSS 0.7%CVE-2024-58362HIGHSurrealDB before 1.5.5 Query Injection via RPC APIEPSS 0.6%CVE-2026-63757HIGHSurrealDB before 3.1.0 Session Hijacking via /rpc sessionsEPSS 0.5%CVE-2026-63760HIGHSurrealDB before 3.1.0 Denial of Service via JSON ParserEPSS 0.5%CVE-2026-63747HIGHSurrealDB before 3.1.0 Denial of Service via malformed RPC useEPSS 0.5%CVE-2026-63763HIGHSurrealDB before 2.5.0 Privilege Escalation via Future FieldsEPSS 0.5%CVE-2026-63750MEDIUMSurrealDB before 3.1.0 Memory Amplification via /sql WebSocketEPSS 0.5%CVE-2024-58370HIGHSurrealDB before 1.1.0 Uncontrolled Recursion Denial of ServiceEPSS 0.5%CVE-2026-63737HIGHSurrealDB before 3.1.5 Denial of Service via deep operator chainsEPSS 0.5%CVE-2026-63739HIGHSurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZEREPSS 0.5%CVE-2026-63734MEDIUMSurrealDB before 3.2.0 Denial of Service via malformed SurrealML importEPSS 0.5%CVE-2024-58358MEDIUMSurrealDB before 2.1.0 Denial of Service via Nonexistent RoleEPSS 0.5%CVE-2023-54366HIGHSurrealDB before 1.0.1 Insecure Default Table PermissionsEPSS 0.5%CVE-2024-58365HIGHSurrealDB before 1.2.0 Denial of Service via Nonexistent FunctionEPSS 0.4%CVE-2024-58361HIGHSurrealDB before 2.0.4 Denial of Service via Parser ExceptionEPSS 0.4%CVE-2026-63754HIGHSurrealDB before 3.1.0 Denial of Service via LIVE QueryEPSS 0.4%CVE-2024-58369HIGHSurrealDB before 1.1.1 Denial of Service via Global ParametersEPSS 0.4%CVE-2024-58357HIGHSurrealDB before 2.1.0 Denial of Service via rand::time()EPSS 0.4%CVE-2026-63759HIGHSurrealDB before 3.1.0 Denial of Service nested type annotationsEPSS 0.4%CVE-2026-63762MEDIUMSurrealDB before v2.6.1 Denial of Service via scriptingEPSS 0.4%