Vulnerabilidades en surrealdb
77 resultadosCVE-2026-63753MEDIUMSurrealDB before 3.1.0 Authentication Bypass via LIVE QueryEPSS 0.4%CVE-2026-49997MEDIUMSurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deletedEPSS 0.3%CVE-2024-58363MEDIUMSurrealDB before 1.5.4 Authentication Bypass via Database SwitchEPSS 0.3%CVE-2026-121423HIGHSurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value SerializationEPSS 0.3%CVE-2026-121421MEDIUMSurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing BypassEPSS 0.3%CVE-2026-63309MEDIUMSurrealDB < 3.1.5 Information Disclosure via ORDER BYEPSS 0.3%CVE-2025-71398MEDIUMSurrealDB before 2.2.2 SSRF via HTTP Redirect BypassEPSS 0.3%CVE-2026-63748MEDIUMSurrealDB before 3.1.0 Information Disclosure via Error MessagesEPSS 0.3%CVE-2026-63744MEDIUMSurrealDB before 3.1.5 SSRF via JWKS URL RedirectEPSS 0.3%CVE-2026-121419HIGHSurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject CollisionEPSS 0.3%CVE-2026-63736MEDIUMSurrealDB before 3.2.0 SSRF via JWKS URL hostname resolutionEPSS 0.3%CVE-2026-121416HIGHSurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style InvocationsEPSS 0.3%CVE-2026-63758MEDIUMSurrealDB before 3.1.0 Authorization Bypass via KILL StatementEPSS 0.3%CVE-2026-109338HIGHSurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII ValuesEPSS 0.3%CVE-2026-109335HIGHSurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED FieldsEPSS 0.3%CVE-2026-63751MEDIUMSurrealDB before 3.1.0 Field Permission Bypass via JSON PatchEPSS 0.3%CVE-2026-63742MEDIUMSurrealDB before 3.1.0 Field Permission Bypass via Indexed COUNTEPSS 0.3%CVE-2026-63733MEDIUMSurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS ClauseEPSS 0.3%CVE-2026-109333HIGHSurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCHEPSS 0.3%CVE-2026-63738MEDIUMSurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via TraversalEPSS 0.3%