CVE-2024-58364 | BDVDB-2026-349341 Detail

Description#

SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on line terminator characters. Authorized clients can submit malformed queries that trigger a panic in the span rendering code, crashing the server and causing denial of service.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-07-18Record published in the CVE List.
2. Version 22026-07-28Most recent update recorded in the CVE List.