Vulnerabilidades em surrealdb
77 resultadosAnálise Vexday
O SurrealDB apresenta um panorama de risco elevado com 57 vulnerabilidades identificadas, todas publicadas nos últimos 90 dias, indicando descobertas recentes em massa. Embora apenas 3 sejam críticas e nenhuma esteja sob ataque ativo no momento, a predominância de falhas de tratamento de exceções (CWE-248) sugere deficiências estruturais no tratamento de erros que podem ser exploradas. A concentração temporal das divulgações aponta para um produto em fase de escrutínio intenso, exigindo monitoramento contínuo e priorização das mitigações críticas.
CVE-2026-63759HIGHSurrealDB before 3.1.0 Denial of Service nested type annotationsEPSS 0.4%CVE-2024-58359HIGHSurrealDB before 2.1.0 Denial of Service via rand() SortingEPSS 0.4%CVE-2024-58361HIGHSurrealDB before 2.0.4 Denial of Service via Parser ExceptionEPSS 0.4%CVE-2026-63762MEDIUMSurrealDB before v2.6.1 Denial of Service via scriptingEPSS 0.4%CVE-2025-71395HIGHSurrealDB before 2.2.2 Memory Exhaustion via string::replaceEPSS 0.4%CVE-2024-58364HIGHSurrealDB before 1.2.1 Denial of Service via Parsing ErrorEPSS 0.4%CVE-2026-63754HIGHSurrealDB before 3.1.0 Denial of Service via LIVE QueryEPSS 0.4%CVE-2024-58357HIGHSurrealDB before 2.1.0 Denial of Service via rand::time()EPSS 0.4%CVE-2024-58369HIGHSurrealDB before 1.1.1 Denial of Service via Global ParametersEPSS 0.4%CVE-2025-71392CRITICALSurrealDB before 2.2.2 SurrealQL Injection via exportEPSS 0.4%CVE-2026-63746HIGHSurrealDB before 3.1.0 Permission Bypass via Graph TraversalEPSS 0.4%CVE-2026-109339MEDIUMSurrealDB 3.1.0 before 3.3.0 Memory Exhaustion via Surrealism Module Output BufferingEPSS 0.4%CVE-2026-63741MEDIUMSurrealDB before 3.1.0 Authentication Bypass via USE statementEPSS 0.4%CVE-2026-63756CRITICALSurrealDB before 3.1.0 Privilege Escalation via RPC Session Race ConditionEPSS 0.4%CVE-2026-63735HIGHSurrealDB before 3.2.0 Authentication Bypass via Custom APIEPSS 0.4%CVE-2025-71394LOWSurrealDB before 2.2.2 Local File Read via DEFINE ANALYZEREPSS 0.4%CVE-2026-63755HIGHSurrealDB before 3.1.0 Permission Bypass via WHERE ClauseEPSS 0.4%CVE-2026-63749MEDIUMSurrealDB before 3.1.0 Authentication Bypass via LIVE SELECTEPSS 0.4%CVE-2024-58367HIGHSurrealDB before 2.0.4 Improper Authorization via SELECT PermissionsEPSS 0.4%CVE-2026-63740HIGHSurrealDB before 3.1.4 Array Element Permission BypassEPSS 0.4%