SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Values

SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fields

SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCH

SurrealDB before v2.6.1 Denial of Service via scripting

SurrealDB before 3.1.0 Denial of Service nested type annotations

SurrealDB before 3.1.0 Permission Bypass via WHERE Clause

SurrealDB before 3.1.0 Denial of Service via LIVE Query

SurrealDB before 3.1.0 Permission Bypass via Graph Traversal

SurrealDB before 3.1.0 Authentication Bypass via USE statement

SurrealDB before 3.1.4 Array Element Permission Bypass

SurrealDB before 3.1.5 Denial of Service via deep operator chains

SurrealDB before 3.2.0 Permissions Bypass via PERMISSIONS Clause

SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops

SurrealDB before 2.2.2 Denial of Service via JavaScript Scripting

SurrealDB before 2.2.2 Memory Exhaustion via string::replace

SurrealDB before 2.2.2 Memory Exhaustion via Nested Functions

SurrealDB before 2.2.2 Denial of Service via /sql endpoint

SurrealDB before 1.1.0 Uncontrolled Recursion Denial of Service

SurrealDB before 1.1.1 Denial of Service via Global Parameters

SurrealDB before 2.0.4 Improper Authorization via SELECT Permissions

SurrealDB before 1.2.0 Denial of Service via Nonexistent Function

SurrealDB before 1.2.1 Denial of Service via Parsing Error

SurrealDB before 2.0.4 Denial of Service via Parser Exception

SurrealDB before 2.1.0 Denial of Service via rand() Sorting

SurrealDB before 2.1.0 Denial of Service via rand::time()

SurrealDB before 3.1.0 Port-Specific Deny Rule Bypass via HTTP Redirect

SurrealDB before 1.5.4 Authentication Bypass via Database Switch

SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE

SurrealDB 3.0.0 before 3.3.0 Missing Authentication in revoke RPC Method

SurrealDB 3.1.0 before 3.3.0 Authorization Bypass via REFERENCE ON DELETE CASCADE

SurrealDB before 3.1.0 Authorization Bypass via KILL Statement

SurrealDB before 3.1.0 Authorization Bypass via Composite Record-id

SurrealDB: Edge PERMISSIONS FOR delete bypassed when a connected node is deleted

SurrealDB 3.1.0 before 3.3.0 Memory Exhaustion via Surrealism Module Output Buffering

SurrealDB before 3.2.0 Denial of Service via malformed SurrealML import

SurrealDB before 2.1.0 Denial of Service via Nonexistent Role

SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE Clause

SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT $before/$after

SurrealDB before 3.1.0 Algorithm Downgrade via ES512

SurrealDB before 3.1.0 Authentication Bypass via LIVE Query

SurrealDB before 3.1.0 RELATE Statement Record Overwrite

SurrealDB before 3.1.0 Field Permission Bypass via JSON Patch

SurrealDB before 3.1.0 Authentication Bypass via LIVE SELECT

SurrealDB before 3.1.0 Information Disclosure via Error Messages

SurrealDB before 3.1.0 Field Permission Bypass via Indexed COUNT

SurrealDB 3.1.0 before 3.1.5 Field Permission Bypass via Traversal

SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER

SurrealDB < 3.1.5 Information Disclosure via ORDER BY

SurrealDB before 3.1.5 SSRF via JWKS URL Redirect

SurrealDB before 3.2.0 SSRF via JWKS URL hostname resolution