CVE-2024-58357 — SurrealDB before 2.1.0 Denial of Service via rand::time()
SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() function that panics when unwrap is called on a None result from timestamp_opt. A…
Published: 2026-07-18 · CVSS: 7.1 · CVSS 4.0
SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() function that panics when unwrap is called on a None result from timestamp_opt. Authorized clients can repeatedly invoke rand::time() to reliably trigger server panics and cause denial of service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7