CVE-2026-121423

SurrealDB versions before 3.3.0 are vulnerable to a Denial of Service (DoS) attack due to unbounded recursion in val::Value serialization . Authenticated users can trigger a stack overflow by executing UPDATE statements that wrap a stored array in itself, subsequently triggering the overflow duri...