CVE-2026-63762 SurrealDB before v2.6.1 Denial of Service via scripting

SurrealDB before v2.6.1 and before v3.0.0-beta.3 contains a denial of service vulnerability in its embedded JavaScript scripting engine, which is enabled via the --allow-scripting capability disabled by default. Any user able to execute arbitrary queries — including unauthenticated guests when...

PT-2026-61578

Name of the Vulnerable Software and Affected Versions SurrealDB versions prior to 2.6.1 SurrealDB versions prior to 3.0.0-beta.3 Description A denial of service issue exists in the embedded JavaScript scripting engine, which is activated by the --allow-scripting capability. Users capable of...