| Package | Affected versions | Patched versions |
|---|---|---|
| surrealdb | < 3.1.0 | 3.1.0 |
SurrealDB versions before 3.1.0 fail to enforce table SELECT permissions when traversing graph edges or back-references. Authenticated users can read records from any table reachable through graph edges regardless of the target table's PERMISSIONS FOR select clause.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free