Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: surrealdb 1.1.1 Clear all filters
TI-2024-38453 CVE-2024-58369 · GHSA-22wv-v5wx-cm9x

SurrealDB before 1.1.1 Denial of Service via Global Parameters

Priority LOW 32

SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0045 Published 2026-07-18 Fixed in 1.1.1 CWE-248
TI-2024-38450 CVE-2024-58366 · GHSA-qcfm-cmfw-f4x4

SurrealDB before 1.1.1 Format String via Scripting Functions

Priority MEDIUM 42

SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled.

CVSS 4.0CRITICAL 9.0 Network Low privileges No interaction EPSS 0.00575 Published 2026-07-18 Fixed in 1.1.1, 0.4.2 CWE-134