Vulnerabilities in surrealdb
57 resultsCVE-2026-63750MEDIUMSurrealDB before 3.1.0 Memory Amplification via /sql WebSocketEPSS —CVE-2026-63743MEDIUMSurrealDB before 3.1.0 Port-Specific Deny Rule Bypass via HTTP RedirectEPSS —CVE-2026-63740HIGHSurrealDB before 3.1.4 Array Element Permission BypassEPSS —CVE-2026-63734MEDIUMSurrealDB before 3.2.0 Denial of Service via malformed SurrealML importEPSS —CVE-2026-63748MEDIUMSurrealDB before 3.1.0 Information Disclosure via Error MessagesEPSS —CVE-2026-63752MEDIUMSurrealDB before 3.1.0 RELATE Statement Record OverwriteEPSS —CVE-2026-63741MEDIUMSurrealDB before 3.1.0 Authentication Bypass via USE statementEPSS —CVE-2026-63758MEDIUMSurrealDB before 3.1.0 Authorization Bypass via KILL StatementEPSS —CVE-2026-63756CRITICALSurrealDB before 3.1.0 Privilege Escalation via RPC Session Race ConditionEPSS —CVE-2026-63737HIGHSurrealDB before 3.1.5 Denial of Service via deep operator chainsEPSS —CVE-2026-63757HIGHSurrealDB before 3.1.0 Session Hijacking via /rpc sessionsEPSS —CVE-2026-63742MEDIUMSurrealDB before 3.1.0 Field Permission Bypass via Indexed COUNTEPSS —CVE-2026-63746HIGHSurrealDB before 3.1.0 Permission Bypass via Graph TraversalEPSS —CVE-2026-63739HIGHSurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZEREPSS —CVE-2026-63763HIGHSurrealDB before 2.5.0 Privilege Escalation via Future FieldsEPSS —CVE-2026-63761MEDIUMSurrealDB before 3.1.0 Algorithm Downgrade via ES512EPSS —CVE-2026-63753MEDIUMSurrealDB before 3.1.0 Authentication Bypass via LIVE QueryEPSS —