Lucene search
+L

23 matches found

OSV
OSV
added 2026/07/01 8:3 p.m.8 views

GHSA-Q729-696Q-G9PQ SurrealDB has Denial of Service in JSON parser due to nested objects

The SurrealDB value and JSON parser did not enforce the configured recursion depth limit when parsing nested , , or tokens. The expression parser already enforced the limit for these tokens; the value/JSON parser omitted it. An unauthenticated attacker could send a deeply nested JSON payload to t...

7.5CVSS6.1AI score
SaveExploits0References3
Rows per page
Query Builder