crates.io/surrealdb: medium 4.3

SurrealDB: Authenticated subscribers can read records hidden by SELECT permissions via LIVE subscriptions

Action: Upgrade surrealdb to 3.1.0 or later.

cargo update -p surrealdb --precise 3.1.0

Affected

Fixed versions

Sources

• osv: GHSA-6wqw-vhfr-9999
• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6wqw-vhfr-9999
• https://github.com/surrealdb/surrealdb/commit/6bcc55c9c0494a0d4d36821019b54459f7162af7
• https://github.com/orgs/surrealdb/discussions/101
• https://github.com/surrealdb/surrealdb

published 2026-07-01T20:20:00Z · modified 2026-07-01T20:30:08.840694225Z · JSON