{"action":"Upgrade surrealdb to 1.1.1 or later.","affected":[{"fixed":"1.1.1","introduced":"0"}],"component":"surrealdb","cve_ids":["CVE-2024-58366"],"ecosystem":"crates.io","epss":0.00575,"exploited":false,"fixed_versions":["1.1.1"],"ghsa_id":"GHSA-q3gg-m8hr-h4x4","id":"tcs_01M5KF2B8KWYQN6P5K3NXXGNEH","modified_at":"2026-07-19T03:56:47.888953236Z","published_at":"2024-02-21T00:04:05Z","references":["https://osv.dev/vulnerability/GHSA-q3gg-m8hr-h4x4","https://github.com/surrealdb/surrealdb/security/advisories/GHSA-q3gg-m8hr-h4x4","https://github.com/surrealdb/surrealdb/issues/3327","https://github.com/surrealdb/surrealdb/pull/3332","https://github.com/surrealdb/surrealdb"],"severity":{"label":"high","score":8.5},"sources":[{"source":"osv","source_id":"GHSA-q3gg-m8hr-h4x4","url":"https://osv.dev/vulnerability/GHSA-q3gg-m8hr-h4x4"}],"summary":"Externally Controlled Format String in Scripting Functions"}