Vulnerabilities in surrealdb
57 resultsCVE-2025-71395HIGHSurrealDB before 2.2.2 Memory Exhaustion via string::replaceEPSS 0.2%CVE-2025-71390MEDIUMSurrealDB before 2.3.6 deny-net Bypass via DNS ResolutionEPSS 0.2%CVE-2025-71398MEDIUMSurrealDB before 2.2.2 SSRF via HTTP Redirect BypassEPSS 0.2%CVE-2024-58367HIGHSurrealDB before 2.0.4 Improper Authorization via SELECT PermissionsEPSS 0.2%CVE-2024-58363MEDIUMSurrealDB before 1.5.4 Authentication Bypass via Database SwitchEPSS 0.2%CVE-2026-63309MEDIUMSurrealDB < 3.1.5 Information Disclosure via ORDER BYEPSS 0.2%CVE-2026-63744MEDIUMSurrealDB before 3.1.5 SSRF via JWKS URL RedirectEPSS —CVE-2026-63738MEDIUMSurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via TraversalEPSS —CVE-2026-63751MEDIUMSurrealDB before 3.1.0 Field Permission Bypass via JSON PatchEPSS —CVE-2026-63733MEDIUMSurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS ClauseEPSS —CVE-2026-63749MEDIUMSurrealDB before 3.1.0 Authentication Bypass via LIVE SELECTEPSS —CVE-2026-63755HIGHSurrealDB before 3.1.0 Permission Bypass via WHERE ClauseEPSS —CVE-2026-63735HIGHSurrealDB before 3.2.0 Authentication Bypass via Custom APIEPSS —CVE-2026-63754HIGHSurrealDB before 3.1.0 Denial of Service via LIVE QueryEPSS —CVE-2026-63736MEDIUMSurrealDB before 3.2.0 SSRF via JWKS URL hostname resolutionEPSS —CVE-2026-63759HIGHSurrealDB before 3.1.0 Denial of Service nested type annotationsEPSS —CVE-2026-63745MEDIUMSurrealDB before 3.1.0 Authorization Bypass via Composite Record-idEPSS —CVE-2026-63760HIGHSurrealDB before 3.1.0 Denial of Service via JSON ParserEPSS —CVE-2026-63762MEDIUMSurrealDB before v2.6.1 Denial of Service via scriptingEPSS —CVE-2026-63747HIGHSurrealDB before 3.1.0 Denial of Service via malformed RPC useEPSS —