SurrealDB before 2.5.0 Privilege Escalation via Future Fields

SurrealDB before 3.1.0 Session Hijacking via /rpc sessions

SurrealDB before 2.3.6 deny-net Bypass via DNS Resolution

SurrealDB before 1.1.1 Format String via Scripting Functions

SurrealDB before 1.5.5 Query Injection via RPC API

SurrealDB before 1.0.1 Insecure Default Table Permissions

SurrealDB before 3.3.0 Cross-Tenant Access via USE Statement

SurrealDB before 3.3.0 Cross-Tenant Access via Surreal-NS/Surreal-DB Headers and RPC use

SurrealDB before 3.3.0 Cross-Tenant Access via Headers

SurrealDB before 3.1.0 Privilege Escalation via RPC Session Race Condition

SurrealDB before 3.2.0 Authentication Bypass via Custom API

SurrealDB before 2.2.2 SurrealQL Injection via export

SurrealDB before 3.1.5 Arbitrary File Read via DEFINE ANALYZER

SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass

SurrealDB before 3.1.0 Denial of Service via JSON Parser

SurrealDB before 3.1.0 Memory Amplification via /sql WebSocket

SurrealDB before 3.1.0 Denial of Service via malformed RPC use

SurrealDB before 1.1.0 Denial of Service via HTTP Headers

SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operations

SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Values

SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fields

SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCH

SurrealDB before v2.6.1 Denial of Service via scripting

SurrealDB before 3.1.0 Denial of Service nested type annotations

SurrealDB before 3.1.0 Permission Bypass via WHERE Clause

SurrealDB before 3.1.0 Denial of Service via LIVE Query

SurrealDB before 3.1.0 Permission Bypass via Graph Traversal

SurrealDB before 3.1.0 Authentication Bypass via USE statement

SurrealDB before 3.1.4 Array Element Permission Bypass

SurrealDB before 3.1.5 Denial of Service via deep operator chains

SurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS Clause

SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops

SurrealDB before 2.2.2 Denial of Service via JavaScript Scripting

SurrealDB before 2.2.2 Memory Exhaustion via string::replace

SurrealDB before 2.2.2 Memory Exhaustion via Nested Functions

SurrealDB before 2.2.2 Denial of Service via /sql endpoint

SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service

SurrealDB before 1.1.1 Denial of Service via Global Parameters

SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions

SurrealDB before 1.2.0 Denial of Service via Nonexistent Function

SurrealDB before 1.2.1 Denial of Service via Parsing Error

SurrealDB before 2.0.4 Denial of Service via Parser Exception

SurrealDB before 2.1.0 Denial of Service via rand() Sorting

SurrealDB before 2.1.0 Denial of Service via rand::time()

SurrealDB before 3.1.0 Port-Specific Deny Rule Bypass via HTTP Redirect

SurrealDB before 1.5.4 Authentication Bypass via Database Switch

SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE

SurrealDB 3.0.0 before 3.3.0 Missing Authentication in revoke RPC Method

SurrealDB 3.1.0 before 3.3.0 Authorization Bypass via REFERENCE ON DELETE CASCADE

SurrealDB before 3.1.0 Authorization Bypass via KILL Statement