Vulnerabilities in surrealdb
77 resultsCVE-2026-63752MEDIUMSurrealDB before 3.1.0 RELATE Statement Record OverwriteEPSS 0.3%CVE-2026-63761MEDIUMSurrealDB before 3.1.0 Algorithm Downgrade via ES512EPSS 0.3%CVE-2026-109342MEDIUMSurrealDB 3.0.0 before 3.3.0 Missing Authentication in revoke RPC MethodEPSS 0.3%CVE-2024-58356LOWSurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITEEPSS 0.3%CVE-2026-102876HIGHSurrealDB before 3.3.0 Cross-Tenant Access via HeadersEPSS 0.3%CVE-2026-109334HIGHSurrealDB before 3.3.0 Cross-Tenant Access via Surreal-NS/Surreal-DB Headers and RPC useEPSS 0.3%CVE-2026-109343HIGHSurrealDB before 3.3.0 Cross-Tenant Access via USE StatementEPSS 0.3%CVE-2026-109341HIGHSurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test OperationsEPSS 0.3%CVE-2026-63743MEDIUMSurrealDB before 3.1.0 Port-Specific Deny Rule Bypass via HTTP RedirectEPSS 0.2%CVE-2026-63745MEDIUMSurrealDB before 3.1.0 Authorization Bypass via Composite Record-idEPSS 0.2%CVE-2026-121422MEDIUMSurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port BypassEPSS 0.2%CVE-2026-109337MEDIUMSurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE ClauseEPSS 0.2%CVE-2026-109340MEDIUMSurrealDB 3.1.0 before 3.3.0 Authorization Bypass via REFERENCE ON DELETE CASCADEEPSS 0.2%CVE-2026-109336MEDIUMSurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT $before/$afterEPSS 0.2%CVE-2026-121418MEDIUMSurrealDB 3.1.0 before 3.3.0 Incorrect Authorization via Streaming Index PlannerEPSS 0.2%CVE-2026-121417HIGHSurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV BackendsEPSS 0.2%CVE-2026-121420MEDIUMSurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition AddressesEPSS 0.2%