{"action":"Upgrade surrealdb to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"surrealdb","cve_ids":["CVE-2024-58370"],"ecosystem":"crates.io","epss":0.00487,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-6r8p-hpg7-825g","id":"tcs_01M5KETSBZHR6X79GJFR5SFBT2","modified_at":"2026-07-19T03:56:47.286725902Z","published_at":"2024-01-18T15:55:18Z","references":["https://osv.dev/vulnerability/GHSA-6r8p-hpg7-825g","https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6r8p-hpg7-825g","https://github.com/surrealdb/surrealdb/pull/3232","https://github.com/surrealdb/surrealdb/commit/f838da248e3854e4250e5187a3a67507cb7efaaa","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62410","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62652","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=63797","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64445","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=64731","https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=65277","https://github.com/surrealdb/surrealdb"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-6r8p-hpg7-825g","url":"https://osv.dev/vulnerability/GHSA-6r8p-hpg7-825g"}],"summary":"Uncontrolled Recursion in SurrealQL Parsing"}