Skip to content
OpenAdvisories

Vendor

DelSkayn

1 known vulnerabilities.

Products

rquickjs 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2024-58366

    SurrealDB before 1.1.1 Format String via Scripting Functions

    SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string sequences in error inputs to read arbitrary memory or execute …

    surrealdb DelSkayn surrealdb rquickjs crates.io