Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-56pq-53x9-mxc4

Опубликовано: 20 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.1
CVSS3: 6.5

Описание

SurrealDB before 3.1.0 fails to enforce recursion depth limits in the type/kind parser when processing nested type annotations. Authenticated attackers can send queries with deeply nested type annotations to exhaust server memory and crash the process.

SurrealDB before 3.1.0 fails to enforce recursion depth limits in the type/kind parser when processing nested type annotations. Authenticated attackers can send queries with deeply nested type annotations to exhaust server memory and crash the process.

EPSS

Процентиль: 17%
0.00254
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-674

Связанные уязвимости

CVSS3: 6.5
nvd
23 дня назад

SurrealDB before 3.1.0 fails to enforce recursion depth limits in the type/kind parser when processing nested type annotations. Authenticated attackers can send queries with deeply nested type annotations to exhaust server memory and crash the process.

EPSS

Процентиль: 17%
0.00254
Низкий

7.1 High

CVSS4

6.5 Medium

CVSS3

Дефекты

CWE-674