CVE-2024-58365

SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to trigger a panic that crashes the server...

CVE-2024-58365

CVE-2024-58365 affects SurrealDB versions before 1.2.0. The issue is an uncaught exception in the query executor when processing calls to nonexistent built-in functions, which authorized clients can trigger by crafting pre-parsed queries to invoke such functions, causing the server to panic and c...

UBUNTU-CVE-2022-2880

Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the quer...