CVE-2024-58370
1 advisory.
crates.io/surrealdb CVE-2024-58370: medium 6.5, EPSS 0.49%
Uncontrolled Recursion in SurrealQL Parsing
Action: Upgrade surrealdb to 1.1.0 or later.
cargo update -p surrealdb --precise 1.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.0 | - |
Fixed versions
| 1.1.0 |
Sources
- osv: GHSA-6r8p-hpg7-825g
- https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6r8p-hpg7-825g
- https://github.com/surrealdb/surrealdb/pull/3232
- https://github.com/surrealdb/surrealdb/commit/f838da248e3854e4250e5187a3a67507cb7efaaa
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62410
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62652
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63797
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64445
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64731
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65277
- https://github.com/surrealdb/surrealdb
CVE-2024-58370 · published · modified · JSON