crates.io/surrealdb CVE-2024-58356: medium 6.3, EPSS 0.27%
SurrealDB has Silent Failure to Overwrite Table Definition of Relation Type
Action: Upgrade surrealdb to 2.1.4 or later.
cargo update -p surrealdb --precise 2.1.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.1.4 | - |
Fixed versions
| 2.1.4 |
Sources
- osv: GHSA-27vq-hv74-7cqp
- nvd: CVE-2024-58356
- https://github.com/surrealdb/surrealdb/security/advisories/GHSA-27vq-hv74-7cqp
- https://github.com/surrealdb/surrealdb/pull/5260
- https://github.com/surrealdb/surrealdb/commit/2f9a58f830c24f107b4783da1f0704a502bc7734
- https://github.com/surrealdb/surrealdb
- https://www.vulncheck.com/advisories/surrealdb-before-permission-bypass-via-define-table-overwrite
CVE-2024-58356 · published · modified · JSON