Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/01 8:19 p.m.13 views

SurrealDB: `RELATE` overwrites existing edge records without `UPDATE` permission

RELATE creates an edge record between two existing records, and SurrealDB enforces the CREATE permission on the edge table for this operation. When the statement included a SET id = edge:existing clause, however, the new edge's id ended up pointing at an record that was already in storage. Rather...

5.8AI score
SaveExploits0References4Affected Software1
Rows per page
Query Builder