crates.io/surrealdb-core CVE-2024-58361: medium 6.5, EPSS 0.45%
SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings
Action: Upgrade surrealdb-core to 2.0.4 or later.
cargo update -p surrealdb-core --precise 2.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0 | 2.0.4 | - |
Fixed versions
| 2.0.4 |
Sources
- osv: GHSA-qjrv-v6qp-x99x#crates.io/surrealdb-core
- https://github.com/surrealdb/surrealdb/security/advisories/GHSA-qjrv-v6qp-x99x
- https://github.com/surrealdb/surrealdb/pull/4923
- https://github.com/surrealdb/surrealdb/commit/709d6efe901dbf3e207b4fc2ebc30775595efc16
- https://github.com/surrealdb/surrealdb
CVE-2024-58361 · published · modified · JSON