Vulnerability GHSA-jc55-246c-r88f
Advisory details are being prepared in the background.
Medium Risk
MEDIUM RISK
CVSS Score: 4.9
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
November 22, 2024 at 08:11 PM UTC
SurrealDB has an Uncaught Exception Handling Nonexistent Role
<2.1.0
<2.1.0
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
3 days ago
Data race and double free via unsound `Send`/`Sync` in `reblessive`
>=0.0.0-0 <4.0.0 RUSTSEC-2026-0454
>=0.0.0-0 <4.0.0 RUSTSEC-2026-0454
High Risk
18 days ago
Use-after-free in KV backends via leaked `affinitypool::spawn_local` future
>=0.0.0-0 <3.3.0 RUSTSEC-2026-0453
>=0.0.0-0 <3.3.0 RUSTSEC-2026-0453
Medium Risk
2 months ago
SurrealDB: Writes in a PERMISSIONS clause bypass table permissions
<3.2.0 GHSA-66r2-5gwj-gxm2
<3.2.0 GHSA-66r2-5gwj-gxm2
High Risk
2 months ago
SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path
<3.2.0 GHSA-848m-r628-vrxw
<3.2.0 GHSA-848m-r628-vrxw
Medium Risk
2 months ago
SurrealDB: Array element-level (field.*) SELECT permissions leak denied elements to record users
<3.1.4 GHSA-8rw6-p7m8-63jp
<3.1.4 GHSA-8rw6-p7m8-63jp
Impacted packages
Timeline
Published
1 year ago
November 22, 2024 at 08:11 PM UTC
Fixed (2.1.0)
1 year ago
November 21, 2024 at 05:43 PM UTC
Fixed (2.1.0)
1 year ago
November 21, 2024 at 05:44 PM UTC
Last Modified
2 months ago
September 04, 2026 at 07:30 PM UTC