CVE-2024-58361 — SurrealDB before 2.0.4 Denial of Service via Parser Exception
SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can exe…
Published: 2026-07-18 · CVSS: 7.1 · CVSS 4.0
SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings. Authorized clients can execute malformed queries with empty string conversions to record, duration, or datetime types that cause a panic in error rendering, crashing the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7