GHSA-9QJC-Q7HW-VW5R Duplicate Advisory: Uncaught Exception in Macro Expecting Native Function to Exist

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6wr5-jmpr-mjcx. This link is maintained to preserve external references. Original Description SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing cal...

Duplicate Advisory: Uncaught Exception in Macro Expecting Native Function to Exist

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6wr5-jmpr-mjcx. This link is maintained to preserve external references. Original Description SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing cal...

CVE-2024-58365 SurrealDB before 1.2.0 Denial of Service via Nonexistent Function

SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to trigger a panic that crashes the server...

EUVD-2024-55681

SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to trigger a panic that crashes the server...

CVE-2024-58365

CVE-2024-58365 affects SurrealDB versions before 1.2.0. The issue is an uncaught exception in the query executor when processing calls to nonexistent built-in functions, which authorized clients can trigger by crafting pre-parsed queries to invoke such functions, causing the server to panic and c...

GHSA-J4R7-P9FP-W3F3 Spring Cloud Function Framework vulnerable to Denial of Service

In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose functions with non-existing functions. Specifically, an application is vulnerable when all of the following are true: User is using Sprin...

Spring Cloud Function Web DOS Vulnerability

Description In Spring Cloud Function framework, versions 4.1.x prior to 4.1.2, 4.0.x prior to 4.0.8 an application is vulnerable to a DOS attack when attempting to compose functions with non-existing functions. Specifically, an application is vulnerable when all of the following are true: User is...