tursodatabase

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

tursodatabase records in CISA KEV

No tursodatabase vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-58809 CVE-2026-85698 · GHSA-xvgm-8rpx-fmg6

Turso through 0.8.0-pre.8 Out-of-Bounds Read Denial of Service

LOW 29

Turso through 0.8.0-pre.8 contains an out-of-bounds read vulnerability in the table-leaf page reader that uses an attacker-controlled cell-count field without bounds validation.

CVSS 4.0MEDIUM 6.8 Local No auth User interaction EPSS 0.00172 Published 2026-09-04 No fix listed CWE-125

TI-2026-36060 CVE-2026-48790 · GHSA-57f6-pvx8-hwj6

turso-cli persists Turso platform JWT with world-readable (0o644) file permissions

LOW 24

Turso CLI is the command line interface (CLI) to the open-source database Turso.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2026-08-11 Fixed in 1.0.26 CWE-276

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0