Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: surrealdb 2.0.4 Clear all filters
TI-2024-38451 CVE-2024-58367 · GHSA-9722-9j67-vjcr

SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions

Priority LOW 37

SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, UPDATE, and DELETE operations, allowing authorized users to access unauthorized field values through various query techniques.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00358 Published 2026-07-18 Fixed in 2.0.4 CWE-285
TI-2024-38445 CVE-2024-58361 · GHSA-m66w-p9jp-37jq

SurrealDB before 2.0.4 Denial of Service via Parser Exception

Priority LOW 32

SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0045 Published 2026-07-18 Fixed in 2.0.4 CWE-248