CVE-2026-121421

SurrealDB versions 3.1.0 before 3.3.0 are vulnerable to a server-side request forgery (SSRF) vulnerability in the network-capability matching logic. The root cause is that port-specific --deny-net rules (matching HOST:PORT or IP:PORT) only evaluate against literal host strings, whereas the resolv...