Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: surrealdb 1.1.0 Clear all filters
TI-2024-38454 CVE-2024-58370 · GHSA-qv48-pw56-mwc4

SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service

Priority LOW 32

SurrealDB versions before 1.1.0 fail to enforce recursion depth limits when parsing nested SurrealQL statements including IF, RELATE, and attribute access idioms.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00487 Published 2026-07-18 Fixed in 1.1.0 CWE-674
TI-2024-38452 CVE-2024-58368 · GHSA-m24x-r6q3-2vp9

SurrealDB before 1.1.0 Denial of Service via HTTP Headers

Priority MEDIUM 45

SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00653 Published 2026-07-18 Fixed in 1.1.0 CWE-248