Skip to content
OpenAdvisories

Package · crates.io

surrealdb-core

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.3
    CVE-2024-58356

    SurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE

    SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ... OVERWRITE clause is used on tables defined with TYPE RELATION. Because table definitions include the PERMISSIONS clause, an attempt to tighten a table's permissions…

    surrealdb surrealdb surrealdb surrealdb-core crates.io