CVE-2024-58359

SurrealDB prior to 2.1.0 contains a denial-of-service vulnerability in the sorting path when using ORDER BY rand(). Authorized clients can trigger a panic in the sorting function, crashing the server. The CVE covers SurrealDB versions before 2.1.0; exploitation details, affected versions beyond w...

PT-2026-60940

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 2.1.0 Description A denial of service issue exists in the sorting mechanism. Authorized clients can trigger a panic in the sorting function by executing queries that utilize the ORDER BY rand clause, which results i...