crates.io/surrealdb-core CVE-2024-58362: high 8.8, EPSS 0.64%

Untrusted Query Object Evaluation in RPC API

Action: Upgrade surrealdb-core to 1.5.2 or later.

cargo update -p surrealdb-core --precise 1.5.2

Affected

Fixed versions

Sources

• osv: GHSA-64f8-pjgr-9wmr#crates.io/surrealdb-core
• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-64f8-pjgr-9wmr
• https://github.com/surrealdb/surrealdb/commit/b7583a653a2c495a60630dffd663f506426db330
• https://github.com/surrealdb/surrealdb/commit/eab7ef5354168d4039f7f7b77042c99a52f770a6
• https://github.com/surrealdb/surrealdb
• https://surrealdb.com/docs/surrealdb/integration/rpc#signin
• https://surrealdb.com/docs/surrealdb/integration/rpc#signup
• https://surrealdb.com/docs/surrealdb/security/authentication#record-users

CVE-2024-58362 · published 2024-09-11T19:20:07Z · modified 2026-07-19T03:56:46.772752333Z · JSON