Vulnerabilidades em surrealdb

57 resultados
Análise Vexday

O SurrealDB apresenta um panorama de risco elevado com 57 vulnerabilidades identificadas, todas publicadas nos últimos 90 dias, indicando descobertas recentes em massa. Embora apenas 3 sejam críticas e nenhuma esteja sob ataque ativo no momento, a predominância de falhas de tratamento de exceções (CWE-248) sugere deficiências estruturais no tratamento de erros que podem ser exploradas. A concentração temporal das divulgações aponta para um produto em fase de escrutínio intenso, exigindo monitoramento contínuo e priorização das mitigações críticas.

CVE-2024-58365HIGHSurrealDB before 1.2.0 Denial of Service via Nonexistent FunctionEPSS 0.4%CVE-2024-58369HIGHSurrealDB before 1.1.1 Denial of Service via Global ParametersEPSS 0.4%CVE-2026-63746HIGHSurrealDB before 3.1.0 Permission Bypass via Graph TraversalEPSS 0.4%CVE-2026-63741MEDIUMSurrealDB before 3.1.0 Authentication Bypass via USE statementEPSS 0.4%CVE-2026-63756CRITICALSurrealDB before 3.1.0 Privilege Escalation via RPC Session Race ConditionEPSS 0.4%CVE-2026-63735HIGHSurrealDB before 3.2.0 Authentication Bypass via Custom APIEPSS 0.4%CVE-2026-63755HIGHSurrealDB before 3.1.0 Permission Bypass via WHERE ClauseEPSS 0.4%CVE-2026-63749MEDIUMSurrealDB before 3.1.0 Authentication Bypass via LIVE SELECTEPSS 0.4%CVE-2026-63740HIGHSurrealDB before 3.1.4 Array Element Permission BypassEPSS 0.4%CVE-2026-63753MEDIUMSurrealDB before 3.1.0 Authentication Bypass via LIVE QueryEPSS 0.4%CVE-2026-49997MEDIUMSurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deletedEPSS 0.3%CVE-2024-58363MEDIUMSurrealDB before 1.5.4 Authentication Bypass via Database SwitchEPSS 0.3%CVE-2026-63309MEDIUMSurrealDB < 3.1.5 Information Disclosure via ORDER BYEPSS 0.3%CVE-2026-63748MEDIUMSurrealDB before 3.1.0 Information Disclosure via Error MessagesEPSS 0.3%CVE-2026-63744MEDIUMSurrealDB before 3.1.5 SSRF via JWKS URL RedirectEPSS 0.3%CVE-2024-58366CRITICALSurrealDB before 1.1.1 Format String via Scripting FunctionsEPSS 0.3%CVE-2026-63736MEDIUMSurrealDB before 3.2.0 SSRF via JWKS URL hostname resolutionEPSS 0.3%CVE-2025-71396LOWSurrealDB before 2.2.2 Denial of Service via JavaScript ScriptingEPSS 0.3%CVE-2025-71397HIGHSurrealDB before 2.2.2 CPU Exhaustion via nested FOR loopsEPSS 0.3%CVE-2026-63758MEDIUMSurrealDB before 3.1.0 Authorization Bypass via KILL StatementEPSS 0.3%