Security
CVE Feed
Latest vulnerabilities from the National Vulnerability Database.
51763
Total
4101
Critical
15352
High
15010
Medium
| CVE ID | Severity | Score | Description | Published |
|---|---|---|---|---|
| CVE-2026-63756 | HIGH | 8.1 | SurrealDB versions before 3.1.0 contain a time-of-check/time-of-use race condition in the HTTP /rpc endpoint that allows unauthenticated requests to inherit authenticated session state. Unauthenticated attackers … | Jul 20, 2026 |
| CVE-2026-63755 | MEDIUM | 6.5 | SurrealDB before 3.1.0 evaluates user-supplied WHERE clauses in SELECT statements (and SET/MERGE/CONTENT/PATCH clauses in UPDATE, UPSERT, INSERT ON DUPLICATE KEY UPDATE, and RELATE update-variant statements) … | Jul 20, 2026 |
| CVE-2026-63754 | MEDIUM | 6.5 | SurrealDB versions before 3.1.0 contain a denial of service vulnerability where malicious LIVE queries with WHERE clauses that evaluate to errors cause all CREATE, UPDATE, … | Jul 20, 2026 |
| CVE-2026-63753 | MEDIUM | 4.3 | SurrealDB before 3.1.0 fails to refresh authentication state in LIVE SELECT subscriptions when session state changes. Attackers can continue receiving real-time notifications under revoked or … | Jul 20, 2026 |
| CVE-2026-63752 | MEDIUM | 4.3 | SurrealDB before 3.1.0 contains an authorization bypass vulnerability in the RELATE statement that allows authenticated users with CREATE permission to overwrite existing edge records without … | Jul 20, 2026 |
| CVE-2026-63751 | MEDIUM | 4.3 | SurrealDB versions before 3.1.0 contain a field-level permission bypass vulnerability in JSON Patch operations that allows authenticated users to read protected fields. Attackers can use … | Jul 20, 2026 |
| CVE-2026-63750 | MEDIUM | 5.3 | SurrealDB versions before 3.1.0 fail to apply the SURREAL_WEBSOCKET_MAX_MESSAGE_SIZE limit to anonymous /sql WebSocket connections, allowing attackers to buffer unbounded frames in the per-connection read … | Jul 20, 2026 |
| CVE-2026-63749 | MEDIUM | 4.3 | SurrealDB versions before 3.1.0 contain an authentication bypass vulnerability in LIVE SELECT subscriptions where permission expressions referencing $value, $before, $after, or $event are evaluated against … | Jul 20, 2026 |
| CVE-2026-63748 | MEDIUM | 4.3 | SurrealDB versions before 3.1.0 contain an information disclosure vulnerability where authenticated users with UPDATE access can read field values hidden by field-level SELECT permissions through … | Jul 20, 2026 |
| CVE-2026-63747 | HIGH | 7.5 | SurrealDB versions before 3.1.0 contain a denial of service vulnerability in the RPC use handler that panics when db is set without a namespace. Unauthenticated … | Jul 20, 2026 |
| CVE-2026-63746 | MEDIUM | 6.5 | SurrealDB versions before 3.1.0 fail to enforce table SELECT permissions when traversing graph edges or back-references. Authenticated users can read records from any table reachable … | Jul 20, 2026 |
| CVE-2026-63745 | MEDIUM | 5.4 | SurrealDB versions before 3.1.0 contain an authorization bypass vulnerability where authenticated users can spoof composite record-id field values by writing to editable body fields. Attackers … | Jul 20, 2026 |
| CVE-2026-63744 | MEDIUM | 4.1 | SurrealDB before 3.1.5 contains a server-side request forgery vulnerability in the JWKS fetcher that follows HTTP redirects without re-validating redirect targets against network capabilities. Attackers … | Jul 20, 2026 |
| CVE-2026-63743 | MEDIUM | 6.4 | SurrealDB before 3.1.0 contains a capability bypass vulnerability in HTTP redirect handling that allows authenticated users to circumvent port-scoped --deny-net rules. Attackers can chain an … | Jul 20, 2026 |
| CVE-2026-63742 | MEDIUM | 4.3 | SurrealDB versions before 3.1.0 contain a field-level SELECT permission bypass vulnerability in indexed COUNT fast paths. Attackers can execute COUNT queries on indexed fields with … | Jul 20, 2026 |
| CVE-2026-63741 | MEDIUM | 6.5 | SurrealDB versions before 3.1.0 fail to validate DEFINE NAMESPACE or DEFINE DATABASE permissions when processing USE NS and USE DB statements. Unauthenticated attackers can create … | Jul 20, 2026 |
| CVE-2026-63740 | MEDIUM | 6.5 | SurrealDB versions before 3.1.4 fail to properly enforce SELECT permissions on array elements (field.*) for record users, leaking denied array elements instead of hiding them. … | Jul 20, 2026 |
| CVE-2026-63739 | HIGH | 7.7 | SurrealDB before 3.1.5 contains an arbitrary file read vulnerability in the DEFINE ANALYZER mapper filter that allows database users with EDITOR or OWNER roles to … | Jul 20, 2026 |
| CVE-2026-63738 | MEDIUM | 4.3 | SurrealDB versions 3.1.0 before 3.1.5 fail to enforce field-level SELECT permissions when records are accessed through graph-edge or back-reference traversals. Attackers with table-level SELECT access … | Jul 20, 2026 |
| CVE-2026-63737 | MEDIUM | 6.5 | SurrealDB versions before 3.1.5 contain a denial of service vulnerability where authenticated users can crash the server with queries containing long chains of operators. Attackers … | Jul 20, 2026 |
| CVE-2026-63736 | MEDIUM | 4.1 | SurrealDB before 3.2.0 contains a server-side request forgery vulnerability in the JWKS fetcher that validates only the URL hostname string against allow-lists without checking resolved … | Jul 20, 2026 |
| CVE-2026-63735 | HIGH | 8.1 | SurrealDB versions before 3.2.0 fail to validate namespace and database scope in custom API routes, allowing authenticated users to invoke endpoints in different namespaces/databases. Attackers … | Jul 20, 2026 |
| CVE-2026-63734 | MEDIUM | 4.9 | SurrealDB versions before 3.2.0 contain a denial of service vulnerability in the SurrealML header parser that allows authenticated Owner-role users to crash the server by … | Jul 20, 2026 |
| CVE-2026-63733 | MEDIUM | 4.3 | SurrealDB versions before 3.2.0 contain a permissions bypass vulnerability where data-modifying statements within PERMISSIONS clauses execute with enforcement disabled. Attackers with permission to perform a … | Jul 20, 2026 |
| CVE-2026-16254 | MEDIUM | 4.3 | A flaw was found in claircore's apk package scanner. Malformed package-database data in a container layer can cause an out-of-bounds access that panics the scanner. … | Jul 20, 2026 |