CVE-2025-11060 Surrealdb: surrealdb is vulnerable to unauthorized data exposure via live query subscriptions

[
  {
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.1.9",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "2.2.0",
        "lessThan": "2.2.8",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "2.3.0",
        "lessThan": "2.3.8",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "3.3.0",
        "lessThan": "3.3.0-alpha.7",
        "versionType": "semver"
      }
    ],
    "packageName": "surrealdb",
    "collectionURL": "https://github.com/surrealdb/surrealdb/",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Service Mesh 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:service_mesh:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Service Mesh 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-service-mesh/istio-cni-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:service_mesh:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Service Mesh 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-service-mesh/istio-must-gather-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:service_mesh:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Service Mesh 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-service-mesh/istio-pilot-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:service_mesh:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Service Mesh 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:service_mesh:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Service Mesh 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-service-mesh/istio-rhel9-operator",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:service_mesh:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Service Mesh 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-service-mesh/istio-sail-operator-bundle",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:service_mesh:3"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "OpenShift Service Mesh 3",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "openshift-service-mesh-tech-preview/istio-ztunnel-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:service_mesh:3"
    ]
  }
]