| Package | Affected versions | Patched versions |
|---|---|---|
| surrealdb | < 3.1.0 | 3.1.0 |
SurrealDB before 3.1.0 fails to enforce recursion depth limits in the type/kind parser when processing nested type annotations. Authenticated attackers can send queries with deeply nested type annotations to exhaust server memory and crash the process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free