CVE-2024-58365 — SurrealDB before 1.2.0 Denial of Service via Nonexistent Function
SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can…
Published: 2026-07-18 · CVSS: 7.1 · CVSS 4.0
SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to trigger a panic that crashes the server.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7