{"action":"Upgrade surrealdb-core to 1.5.2 or later.","affected":[{"fixed":"1.5.2","introduced":"0"}],"component":"surrealdb-core","cve_ids":["CVE-2024-58362"],"ecosystem":"crates.io","epss":0.00636,"exploited":false,"fixed_versions":["1.5.2"],"ghsa_id":"GHSA-64f8-pjgr-9wmr","id":"tcs_01M5KETENJSYSPTFK8WQV8Q7BR","modified_at":"2026-07-19T03:56:46.772752333Z","published_at":"2024-09-11T19:20:07Z","references":["https://osv.dev/vulnerability/GHSA-64f8-pjgr-9wmr","https://github.com/surrealdb/surrealdb/security/advisories/GHSA-64f8-pjgr-9wmr","https://github.com/surrealdb/surrealdb/commit/b7583a653a2c495a60630dffd663f506426db330","https://github.com/surrealdb/surrealdb/commit/eab7ef5354168d4039f7f7b77042c99a52f770a6","https://github.com/surrealdb/surrealdb","https://surrealdb.com/docs/surrealdb/integration/rpc#signin","https://surrealdb.com/docs/surrealdb/integration/rpc#signup","https://surrealdb.com/docs/surrealdb/security/authentication#record-users"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-64f8-pjgr-9wmr#crates.io/surrealdb-core","url":"https://osv.dev/vulnerability/GHSA-64f8-pjgr-9wmr"}],"summary":"Untrusted Query Object Evaluation in RPC API"}