CVE-2026-63758

概要

参考情報

• surrealdb/surrealdb security advisory · Vendor Advisory
• vulncheck.com/advisories/surrealdb-before-authorization-bypass-via-kill-statement · Third Party Advisory

surrealdb のその他の脆弱性

• CVE-2026-63763高 8.8SurrealDB before 2.5.0 and before 3.0.0-beta.3 contains a confused deputy privilege escalation vulnerability. Unprivileged users (e.g., thos…
• CVE-2026-63762中 6.5SurrealDB before v2.6.1 (and before v3.0.0-beta.3) contains a denial of service vulnerability in its embedded JavaScript scripting engine, w…
• CVE-2026-63761中 4.3SurrealDB before 3.1.0 silently substitutes the ES384 algorithm when a JWT access method is configured with ALGORITHM ES512 (DEFINE ACCESS .…
• CVE-2026-63760高 7.5SurrealDB before 3.1.0 fails to enforce the configured recursion depth limit in the value and JSON parser when processing nested braces, bra…
• CVE-2026-63759中 6.5SurrealDB before 3.1.0 fails to enforce recursion depth limits in the type/kind parser when processing nested type annotations. Authenticate…