Unrated severityNVD Advisory· Published Jul 18, 2026· Updated Jul 28, 2026
SurrealDB before 1.1.0 Denial of Service via HTTP Headers
CVE-2024-58368
Description
SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafted HTTP requests with malformed header values to trigger an uncaught exception that crashes the server.
Affected products
1Patches
Vulnerability mechanics
References
2- github.com/surrealdb/surrealdb/security/advisories/GHSA-m24x-r6q3-2vp9mitrevendor-advisory
- www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-http-headersmitrethird-party-advisory
News mentions
0No linked articles in our index yet.