Surrealdb
This hub aggregates every CVE we track for Surrealdb, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.
47
CVEs tracked
0
Critical
11
High
0
In CISA KEV
Severity distribution
MEDIUM36HIGH11
Monthly trend
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
0
0
0
0
0
0
0
46
0
2024-092026-08
Latest CVEs
The 15 most recently published vulnerabilities affecting Surrealdb.
- CVE-2026-63763SurrealDB before 2.5.0 Privilege Escalation via Future Fields8.8
- CVE-2026-63762SurrealDB before v2.6.1 Denial of Service via scripting6.5
- CVE-2026-63761SurrealDB before 3.1.0 Algorithm Downgrade via ES5124.3
- CVE-2026-63760SurrealDB before 3.1.0 Denial of Service via JSON Parser7.5
- CVE-2026-63759SurrealDB before 3.1.0 Denial of Service nested type annotations6.5
- CVE-2026-63758SurrealDB before 3.1.0 Authorization Bypass via KILL Statement5.4
- CVE-2026-63757SurrealDB before 3.1.0 Session Hijacking via /rpc sessions8.8
- CVE-2026-63756SurrealDB before 3.1.0 Privilege Escalation via RPC Session Race Condition8.1
- CVE-2026-63755SurrealDB before 3.1.0 Permission Bypass via WHERE Clause6.5
- CVE-2026-63754SurrealDB before 3.1.0 Denial of Service via LIVE Query6.5
- CVE-2026-63753SurrealDB before 3.1.0 Authentication Bypass via LIVE Query4.3
- CVE-2026-63751SurrealDB before 3.1.0 Field Permission Bypass via JSON Patch4.3
- CVE-2026-63752SurrealDB before 3.1.0 RELATE Statement Record Overwrite4.3
- CVE-2026-63750SurrealDB before 3.1.0 Memory Amplification via /sql WebSocket5.3
- CVE-2026-63749SurrealDB before 3.1.0 Authentication Bypass via LIVE SELECT4.3
Product normalization is registry-driven with AI assist and human review. How it works