Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/01 8:13 p.m.12 views

GHSA-4V76-CW68-4VC9 SurrealDB: Crafting malicious LIVE queries writes to the database, resulting in DoS, without permission to the table required

A LIVE query whose WHERE clause evaluates to an error caused the source data modifier the user creating, updating, or deleting a record on the watched table to fail instead. Calling any arbitrary SurrealQL function with a typed parameter and passing a value of the wrong type — for example LIVE...

6.5CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder