{"action":"Upgrade surrealdb to 2.5.0 or later.","affected":[{"fixed":"2.5.0","introduced":"0"},{"fixed":"3.0.0-beta.3","introduced":"3.0.0-alpha.1"}],"component":"surrealdb","cve_ids":["CVE-2026-63763"],"ecosystem":"crates.io","epss":0.00497,"exploited":false,"fixed_versions":["2.5.0","3.0.0-beta.3"],"ghsa_id":"GHSA-3v2x-9xcv-2v2v","id":"tcs_01M5KES2PVHGQ1A4KF732K7PM9","modified_at":"2026-07-21T03:56:44.978335361Z","published_at":"2026-01-22T18:06:15Z","references":["https://osv.dev/vulnerability/GHSA-3v2x-9xcv-2v2v","https://github.com/surrealdb/surrealdb/security/advisories/GHSA-3v2x-9xcv-2v2v","https://github.com/surrealdb/surrealdb/commit/f515c91363ee735aa1bc08580d9e7fa0de6e736f","https://github.com/surrealdb/surrealdb","https://github.com/surrealdb/surrealdb/releases/tag/v2.5.0","https://github.com/surrealdb/surrealdb/releases/tag/v3.0.0-beta.2"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-3v2x-9xcv-2v2v","url":"https://osv.dev/vulnerability/GHSA-3v2x-9xcv-2v2v"}],"summary":"SurrealDB Affected by Confused Deputy Privilege Escalation through Future Fields and Functions"}