Vulnerabilities in surrealdb

57 results
Vexday analysis

O SurrealDB apresenta um panorama de risco elevado com 57 vulnerabilidades identificadas, todas publicadas nos últimos 90 dias, indicando descobertas recentes em massa. Embora apenas 3 sejam críticas e nenhuma esteja sob ataque ativo no momento, a predominância de falhas de tratamento de exceções (CWE-248) sugere deficiências estruturais no tratamento de erros que podem ser exploradas. A concentração temporal das divulgações aponta para um produto em fase de escrutínio intenso, exigindo monitoramento contínuo e priorização das mitigações críticas.

CVE-2025-71391HIGHSurrealDB before 2.2.2 Denial of Service via /sql endpointEPSS 0.3%CVE-2026-63742MEDIUMSurrealDB before 3.1.0 Field Permission Bypass via Indexed COUNTEPSS 0.3%CVE-2026-63751MEDIUMSurrealDB before 3.1.0 Field Permission Bypass via JSON PatchEPSS 0.3%CVE-2026-63738MEDIUMSurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via TraversalEPSS 0.3%CVE-2026-63752MEDIUMSurrealDB before 3.1.0 RELATE Statement Record OverwriteEPSS 0.3%CVE-2026-63761MEDIUMSurrealDB before 3.1.0 Algorithm Downgrade via ES512EPSS 0.3%CVE-2025-71393MEDIUMSurrealDB before 2.2.2 Memory Exhaustion via Nested FunctionsEPSS 0.3%CVE-2025-71395HIGHSurrealDB before 2.2.2 Memory Exhaustion via string::replaceEPSS 0.3%CVE-2026-63745MEDIUMSurrealDB before 3.1.0 Authorization Bypass via Composite Record-idEPSS 0.2%CVE-2026-63743MEDIUMSurrealDB before 3.1.0 Port-Specific Deny Rule Bypass via HTTP RedirectEPSS 0.2%CVE-2025-71390MEDIUMSurrealDB before 2.3.6 deny-net Bypass via DNS ResolutionEPSS 0.2%CVE-2025-71394LOWSurrealDB before 2.2.2 Local File Read via DEFINE ANALYZEREPSS 0.2%CVE-2025-71392CRITICALSurrealDB before 2.2.2 SurrealQL Injection via exportEPSS 0.2%CVE-2024-58367HIGHSurrealDB before 2.0.4 Improper Authorization via SELECT PermissionsEPSS 0.2%CVE-2026-63733MEDIUMSurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS ClauseEPSS 0.2%CVE-2024-58356LOWSurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITEEPSS 0.2%CVE-2025-71398MEDIUMSurrealDB before 2.2.2 SSRF via HTTP Redirect BypassEPSS 0.2%