Vulnerabilities in surrealdb
57 resultsCVE-2026-63736MEDIUMSurrealDB before 3.2.0 SSRF via JWKS URL hostname resolutionEPSS 0.2%CVE-2026-63742MEDIUMSurrealDB before 3.1.0 Field Permission Bypass via Indexed COUNTEPSS 0.2%CVE-2026-63749MEDIUMSurrealDB before 3.1.0 Authentication Bypass via LIVE SELECTEPSS 0.2%CVE-2026-63755HIGHSurrealDB before 3.1.0 Permission Bypass via WHERE ClauseEPSS 0.2%CVE-2026-63733MEDIUMSurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS ClauseEPSS 0.2%CVE-2024-58367HIGHSurrealDB before 2.0.4 Improper Authorization via SELECT PermissionsEPSS 0.2%CVE-2026-63738MEDIUMSurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via TraversalEPSS 0.2%CVE-2026-63753MEDIUMSurrealDB before 3.1.0 Authentication Bypass via LIVE QueryEPSS 0.2%CVE-2026-63748MEDIUMSurrealDB before 3.1.0 Information Disclosure via Error MessagesEPSS 0.2%CVE-2024-58363MEDIUMSurrealDB before 1.5.4 Authentication Bypass via Database SwitchEPSS 0.2%CVE-2026-63758MEDIUMSurrealDB before 3.1.0 Authorization Bypass via KILL StatementEPSS 0.2%CVE-2026-63309MEDIUMSurrealDB < 3.1.5 Information Disclosure via ORDER BYEPSS 0.2%CVE-2026-63745MEDIUMSurrealDB before 3.1.0 Authorization Bypass via Composite Record-idEPSS 0.2%CVE-2026-63743MEDIUMSurrealDB before 3.1.0 Port-Specific Deny Rule Bypass via HTTP RedirectEPSS 0.2%CVE-2026-63751MEDIUMSurrealDB before 3.1.0 Field Permission Bypass via JSON PatchEPSS 0.2%CVE-2026-63752MEDIUMSurrealDB before 3.1.0 RELATE Statement Record OverwriteEPSS 0.2%CVE-2026-63761MEDIUMSurrealDB before 3.1.0 Algorithm Downgrade via ES512EPSS 0.2%