{"action":"Upgrade surrealdb to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"surrealdb","cve_ids":["CVE-2024-58368"],"ecosystem":"crates.io","epss":0.00653,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-m24x-r6q3-2vp9","id":"tcs_01M5KF1BJW4CHJN0NP9P07APGX","modified_at":"2026-09-04T20:00:28.306946700Z","published_at":"2024-01-18T15:48:48Z","references":["https://osv.dev/vulnerability/GHSA-m24x-r6q3-2vp9","https://github.com/surrealdb/surrealdb/security/advisories/GHSA-m24x-r6q3-2vp9","https://nvd.nist.gov/vuln/detail/CVE-2024-58368","https://github.com/surrealdb/surrealdb/pull/2985","https://github.com/surrealdb/surrealdb/commit/a70ddb2e2aed2453730b81781e426486247609cb","https://github.com/surrealdb/surrealdb","https://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-http-headers"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-m24x-r6q3-2vp9","url":"https://osv.dev/vulnerability/GHSA-m24x-r6q3-2vp9"}],"summary":"Uncaught Exception processing HTTP Headers in SurrealDB"}