Vulnerabilities
Last updated 1 hour ago
| Package | Summary | Severity | Published | Modified |
|---|---|---|---|---|
surrealdb
|
SurrealDB: Field-level SELECT permissions bypassed via indexed COUNT fast paths | Medium Risk 4.3 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: `RELATE` overwrites existing edge records without `UPDATE` permission | Medium Risk 4.3 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: Arbitrary file read via DEFINE ANALYZER mapper() filter | High Risk 7.7 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB vulnerable to pre-auth memory amplification via unbounded `/sql` WebSocket frames | Medium Risk 5.3 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: Denial of Service via deep operator chains | Medium Risk 6.5 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: HTTP RPC Session Race Condition Allows Privilege Escalation | High Risk 8.1 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB vulnerable to Denial of Service due to nested types annotations | Medium Risk 6.5 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB has unauthenticated remote DoS via malformed RPC `use` call | High Risk 7.5 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: LIVE query subscriptions survive session state changes, bypassing access controls | Medium Risk 4.3 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB has an Authorization Bypass via Composite Record-id Paths | Medium Risk 5.4 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: Authenticated subscribers can read records hidden by SELECT permissions via LIVE subscriptions | Medium Risk 4.3 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: Indexed ORDER BY leaks the value ordering of a SELECT-restricted field | Medium Risk 4.3 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: SSRF via JWKS URL — Redirect Following in JWT Key Fetch | Medium Risk 4.1 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: HTTP /rpc `sessions` method leaks attached session UUIDs, enabling full session hijack by anonymous callers | High Risk 8.8 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: Crafting malicious LIVE queries writes to the database, resulting in DoS, without permission to the table required | Medium Risk 6.5 | 4 months ago | 9 hours ago |
|
surrealdb
|
SurrealDB: USE NS/DB implicit creation bypasses DEFINE authorization | Medium Risk 6.5 | 4 months ago | 9 hours ago |
|
surrealdb-core
|
SurrealDB: Writes in a PERMISSIONS clause bypass table permissions | Medium Risk 4.3 | 2 months ago | 2 months ago |
|
surrealdb
|
SurrealDB has Denial of Service in JSON parser due to nested objects | High Risk 7.5 | 4 months ago | 2 months ago |
|
surrealdb
|
SurrealDB: ES512 silently downgraded to ES384 due to jsonwebtoken crate limitation | Medium Risk 4.3 | 4 months ago | 2 months ago |
|
surrealdb
|
SurrealDB: Port-specific --deny-net rules silently bypassed on HTTP redirect | Medium Risk 6.4 | 4 months ago | 2 months ago |
|
surrealdb
|
SurrealDB: Scraping a TABLE with no available PERMISSIONS to current auth level | Medium Risk 6.5 | 4 months ago | 2 months ago |
|
surrealdb
|
SurrealDB: Authorization Bypass in KILL Statement Allows Termination of Other Users' Live Queries | Medium Risk 5.4 | 4 months ago | 2 months ago |
|
surrealdb
|
SurrealDB: Graph traversal bypasses table SELECT permissions | Medium Risk 6.5 | 4 months ago | 2 months ago |
|
surrealdb
|
SurrealDB: Authenticated callers can read fields hidden by field-level SELECT permissions via error messages | Medium Risk 4.3 | 4 months ago | 2 months ago |
|
surrealdb
|
SurrealDB: Custom API route lets authenticated callers override namespace/database scope via URL path | High Risk 8.1 | 2 months ago | 2 months ago |
|
surrealdb
|
SurrealDB has bypass of field-level SELECT permissions through JSON Patch `copy` and `move` with empty `from` | Medium Risk 4.3 | 4 months ago | 2 months ago |
|
surrealdb
|
SurrealDB: Field-level SELECT permissions bypassed via graph and reference traversals | Medium Risk 4.3 | 4 months ago | 2 months ago |
|
surrealdb
|
SurrealDB: Array element-level (field.*) SELECT permissions leak denied elements to record users | Medium Risk 6.5 | 2 months ago | 2 months ago |
|
surrealdb
|
SurrealDB: Improper Authorization in Select Permissions | Medium Risk 6.5 | 2 years ago | 2 months ago |
|
surrealdb-core
|
SurrealDB: Improper Authorization in Select Permissions | Medium Risk 6.5 | 2 years ago | 2 months ago |
|
surrealdb
|
Uncaught Exception processing HTTP Headers in SurrealDB | High Risk 7.5 | 2 years ago | 2 months ago |
|
surrealdb
|
SurrealDB bypass of deny-net flags via redirect results in server-side request forgery (SSRF) | Medium Risk 6.0 | 1 year ago | 2 months ago |
|
surrealdb
|
SurrealDB server-takeover via SurrealQL injection on backup import | Critical 9.5 | 1 year ago | 2 months ago |
|
surrealdb
|
SurrealDB has an Uncaught Exception Handling Nonexistent Role | Medium Risk 4.9 | 1 year ago | 2 months ago |
|
surrealdb-core
|
SurrealDB has an Uncaught Exception Handling Nonexistent Role | Medium Risk 4.9 | 1 year ago | 2 months ago |
|
surrealdb
|
SurrealDB has Silent Failure to Overwrite Table Definition of Relation Type | Low Risk 3.0 | 1 year ago | 2 months ago |
|
surrealdb-core
|
SurrealDB has Silent Failure to Overwrite Table Definition of Relation Type | Low Risk 3.0 | 1 year ago | 2 months ago |
|
surrealdb
|
SurrealDB: Full Table Permissions by Default | High Risk 8.8 | 2 years ago | 2 months ago |
|
SurrealDB
|
SurrealDB allows bypass of deny-net flags via DNS resolution | Medium Risk 6.0 | 2 months ago | 2 months ago |
surrealdb
|
No summary available | Unknown | 3 months ago | 2 months ago |
|
surrealdb
|
SurrealDB vulnerable to Denial of Service through scripting function memory edge case | Medium Risk 6.0 | 8 months ago | 3 months ago |
|
surrealdb
|
SurrealDB Affected by Confused Deputy Privilege Escalation through Future Fields and Functions | High Risk 8.0 | 9 months ago | 3 months ago |
|
surrealdb
|
SurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deleted | Medium Risk 5.4 | 4 months ago | 3 months ago |
|
surrealdb
|
SurrealDB memory exhaustion via string::replace using regex | High Risk 8.0 | 1 year ago | 3 months ago |
|
surrealdb
|
SurrealDB has an Uncaught Exception in Function Generating Random Time | Medium Risk 6.5 | 1 year ago | 3 months ago |
|
surrealdb-core
|
SurrealDB has an Uncaught Exception in Function Generating Random Time | Medium Risk 6.5 | 1 year ago | 3 months ago |
|
surrealdb
|
Uncaught Exception in surrealdb | Medium Risk 6.5 | 2 years ago | 3 months ago |
|
surrealdb
|
SurrealDB CPU exhaustion via custom functions result in total DoS | High Risk 8.0 | 1 year ago | 3 months ago |
|
surrealdb
|
SurrealDB has local file read of 2-column TSV files via analyzers | Low Risk 3.0 | 1 year ago | 3 months ago |
|
surrealdb
|
SurrealDB no JavaScript script function default timeout could facilitate DoS | Low Risk 3.0 | 1 year ago | 3 months ago |
Page 1