Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-22wv-v5wx-cm9x

Опубликовано: 18 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic. Authorized clients can invoke these entities at unsupported levels to crash the SurrealDB server, resulting in denial of service.

SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic. Authorized clients can invoke these entities at unsupported levels to crash the SurrealDB server, resulting in denial of service.

EPSS

Процентиль: 16%
0.00249
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-248

Связанные уязвимости

CVSS3: 6.5
nvd
13 дней назад

SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic. Authorized clients can invoke these entities at unsupported levels to crash the SurrealDB server, resulting in denial of service.

EPSS

Процентиль: 16%
0.00249
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-248