All products

surrealdb-core

Rust / Cargo · Package
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Data race and double free via unsound `Send`/`Sync` in `reblessive`GHSA-M9QR-4RCQ-3JHC · RUSTSEC-2026-0454 surrealdb-core Rust / Cargo High Fix reported
SurrealDB: Writes in a PERMISSIONS clause bypass table permissionsCVE-2026-63733 · GHSA-66R2-5GWJ-GXM2 surrealdb-core Rust / Cargo Medium Fix reported
SurrealDB: Improper Authorization in Select PermissionsCVE-2024-58367 · GHSA-9722-9J67-VJCR surrealdb-coresurrealdb Rust / Cargo High Fix reported
SurrealDB has an Uncaught Exception Handling Nonexistent RoleCVE-2024-58358 · GHSA-JC55-246C-R88F surrealdb-coresurrealdb Rust / Cargo Medium Fix reported
SurrealDB has Silent Failure to Overwrite Table Definition of Relation TypeCVE-2024-58356 · GHSA-27VQ-HV74-7CQP surrealdb-coresurrealdb Rust / Cargo Low Fix reported
SurrealDB has an Uncaught Exception in Function Generating Random TimeCVE-2024-58357 · GHSA-H4F5-H82V-5W4R surrealdb-coresurrealdb Rust / Cargo Medium Fix reported
SurrealDB has an Uncaught Exception Sorting Tables by Random OrderCVE-2024-58359 · GHSA-M52V-24P8-654F surrealdb-coresurrealdb Rust / Cargo Medium Fix reported
SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty StringsCVE-2024-58361 · GHSA-QJRV-V6QP-X99X surrealdb-coresurrealdb Rust / Cargo High Fix reported
Untrusted Query Object Evaluation in RPC APICVE-2024-58362 · GHSA-64F8-PJGR-9WMR surrealdb-coresurrealdb Rust / Cargo High Fix reported
SurrealDB vulnerable to Improper Authentication when Changing Databases as Scope UserCVE-2024-58363 · GHSA-GH9F-6XM2-C4J2 surrealdb-coresurrealdb Rust / Cargo Medium Fix reported