Vulnerabilities in surrealdb
57 resultsCVE-2024-58368HIGHSurrealDB before 1.1.0 Denial of Service via HTTP HeadersEPSS 0.4%CVE-2024-58362HIGHSurrealDB before 1.5.5 Query Injection via RPC APIEPSS 0.4%CVE-2026-49997MEDIUMSurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deletedEPSS 0.3%CVE-2024-58358MEDIUMSurrealDB before 2.1.0 Denial of Service via Nonexistent RoleEPSS 0.3%CVE-2024-58359HIGHSurrealDB before 2.1.0 Denial of Service via rand() SortingEPSS 0.3%CVE-2024-58357HIGHSurrealDB before 2.1.0 Denial of Service via rand::time()EPSS 0.3%CVE-2025-71394LOWSurrealDB before 2.2.2 Local File Read via DEFINE ANALYZEREPSS 0.3%CVE-2024-58366CRITICALSurrealDB before 1.1.1 Format String via Scripting FunctionsEPSS 0.3%CVE-2025-71396LOWSurrealDB before 2.2.2 Denial of Service via JavaScript ScriptingEPSS 0.3%CVE-2025-71397HIGHSurrealDB before 2.2.2 CPU Exhaustion via nested FOR loopsEPSS 0.3%CVE-2023-54366HIGHSurrealDB before 1.0.1 Insecure Default Table PermissionsEPSS 0.3%CVE-2024-58370HIGHSurrealDB before 1.1.0 Uncontrolled Recursion Denial of ServiceEPSS 0.3%CVE-2025-71391HIGHSurrealDB before 2.2.2 Denial of Service via /sql endpointEPSS 0.3%CVE-2024-58356LOWSurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITEEPSS 0.3%CVE-2024-58361HIGHSurrealDB before 2.0.4 Denial of Service via Parser ExceptionEPSS 0.2%CVE-2024-58365HIGHSurrealDB before 1.2.0 Denial of Service via Nonexistent FunctionEPSS 0.2%CVE-2024-58364HIGHSurrealDB before 1.2.1 Denial of Service via Parsing ErrorEPSS 0.2%CVE-2025-71393MEDIUMSurrealDB before 2.2.2 Memory Exhaustion via Nested FunctionsEPSS 0.2%CVE-2024-58369HIGHSurrealDB before 1.1.1 Denial of Service via Global ParametersEPSS 0.2%CVE-2025-71392CRITICALSurrealDB before 2.2.2 SurrealQL Injection via exportEPSS 0.2%