{"action":"Upgrade surrealdb to 3.1.0 or later.","affected":[{"fixed":"3.1.0","introduced":"0"}],"component":"surrealdb","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["3.1.0"],"ghsa_id":"GHSA-4vgr-h27g-cf9p","id":"tcs_01M5KESTB1VX5MX83AS3EQB36R","modified_at":"2026-07-01T20:15:09.905945219Z","published_at":"2026-07-01T20:02:06Z","references":["https://osv.dev/vulnerability/GHSA-4vgr-h27g-cf9p","https://github.com/surrealdb/surrealdb/security/advisories/GHSA-4vgr-h27g-cf9p","https://github.com/surrealdb/surrealdb/commit/2f53e6e86d1b87e38300e714cfd7aede1abe4c3d","https://github.com/surrealdb/surrealdb/commit/fd800fc7c55afcdc97057d18cf7cb7f83557e702","https://github.com/surrealdb/surrealdb"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-4vgr-h27g-cf9p","url":"https://osv.dev/vulnerability/GHSA-4vgr-h27g-cf9p"}],"summary":"SurrealDB: HTTP RPC Session Race Condition Allows Privilege Escalation"}