Surrealdb
This hub aggregates every CVE we track for Surrealdb, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
110
CVEs tracked
0
Critical
14
High
0
In CISA KEV
Severity distribution
MEDIUM44HIGH14
Monthly trend
2
3
1
0
0
0
8
0
0
0
0
1
0
0
0
1
1
0
0
0
5
77
1
0
2024-102026-09
Latest CVEs
The 15 most recently published vulnerabilities affecting Surrealdb.
- GHSA-8rw6-p7m8-63jpSurrealDB: Array element-level (field.*) SELECT permissions leak denied elements to record users
- CVE-2026-63763SurrealDB before 2.5.0 Privilege Escalation via Future Fields8.8
- CVE-2026-63762SurrealDB before v2.6.1 Denial of Service via scripting6.5
- CVE-2026-63761SurrealDB before 3.1.0 Algorithm Downgrade via ES5124.3
- CVE-2026-63760SurrealDB before 3.1.0 Denial of Service via JSON Parser7.5
- CVE-2026-63759SurrealDB before 3.1.0 Denial of Service nested type annotations6.5
- CVE-2026-63758SurrealDB before 3.1.0 Authorization Bypass via KILL Statement5.4
- CVE-2026-63757SurrealDB before 3.1.0 Session Hijacking via /rpc sessions8.8
- CVE-2026-63756SurrealDB before 3.1.0 Privilege Escalation via RPC Session Race Condition8.1
- CVE-2026-63755SurrealDB before 3.1.0 Permission Bypass via WHERE Clause6.5
- CVE-2026-63754SurrealDB before 3.1.0 Denial of Service via LIVE Query6.5
- CVE-2026-63753SurrealDB before 3.1.0 Authentication Bypass via LIVE Query4.3
- CVE-2026-63751SurrealDB before 3.1.0 Field Permission Bypass via JSON Patch4.3
- CVE-2026-63752SurrealDB before 3.1.0 RELATE Statement Record Overwrite4.3
- CVE-2026-63750SurrealDB before 3.1.0 Memory Amplification via /sql WebSocket5.3
Product normalization is registry-driven with AI assist and human review. How it works