Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/01 8:4 p.m.15 views

SurrealDB has unauthenticated remote DoS via malformed RPC `use` call

A single unauthenticated WebSocket message to /rpc crashed the SurrealDB server. Sending use db: "x" without first selecting a namespace hit .expect"namespace should be set" in the use handler; because surrealdb-core is built with panic = 'abort', the panic terminated the process. use is callable...

5.8AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder