Unrated severityNVD Advisory· Published Jul 18, 2026· Updated Jul 28, 2026
SurrealDB before 1.1.1 Denial of Service via Global Parameters
CVE-2024-58369
Description
SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic. Authorized clients can invoke these entities at unsupported levels to crash the SurrealDB server, resulting in denial of service.
Affected products
1Patches
Vulnerability mechanics
References
2- github.com/surrealdb/surrealdb/security/advisories/GHSA-jm4v-58r5-66hjmitrevendor-advisory
- www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-global-parametersmitrethird-party-advisory
News mentions
0No linked articles in our index yet.