{"action":"Upgrade surrealdb to 2.0.4 or later.","affected":[{"fixed":"2.0.4","introduced":"2.0.0"}],"component":"surrealdb","cve_ids":["CVE-2024-58361"],"ecosystem":"crates.io","epss":0.0045,"exploited":false,"fixed_versions":["2.0.4"],"ghsa_id":"GHSA-qjrv-v6qp-x99x","id":"tcs_01M5KF2MJFQJAV2W1615Q7CHXM","modified_at":"2026-07-19T03:56:47.349043933Z","published_at":"2024-10-08T22:20:02Z","references":["https://osv.dev/vulnerability/GHSA-qjrv-v6qp-x99x","https://github.com/surrealdb/surrealdb/security/advisories/GHSA-qjrv-v6qp-x99x","https://github.com/surrealdb/surrealdb/pull/4923","https://github.com/surrealdb/surrealdb/commit/709d6efe901dbf3e207b4fc2ebc30775595efc16","https://github.com/surrealdb/surrealdb"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qjrv-v6qp-x99x","url":"https://osv.dev/vulnerability/GHSA-qjrv-v6qp-x99x"}],"summary":"SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings"}