{"action":"Upgrade surrealdb to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"0"}],"component":"surrealdb","cve_ids":["CVE-2023-54366"],"ecosystem":"crates.io","epss":0.00462,"exploited":false,"fixed_versions":["1.0.1"],"ghsa_id":"GHSA-x5fr-7hhj-34j3","id":"tcs_01M5KF4JH7138PPEZ5B3RTYDKQ","modified_at":"2026-09-04T19:00:05.377734024Z","published_at":"2023-12-15T03:46:36Z","references":["https://osv.dev/vulnerability/GHSA-x5fr-7hhj-34j3","https://github.com/surrealdb/surrealdb/security/advisories/GHSA-x5fr-7hhj-34j3","https://nvd.nist.gov/vuln/detail/CVE-2023-54366","https://github.com/pypa/advisory-database/tree/main/vulns/surrealdb/PYSEC-2026-3718.yaml","https://github.com/surrealdb/surrealdb","https://www.vulncheck.com/advisories/surrealdb-before-insecure-default-table-permissions"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-x5fr-7hhj-34j3","url":"https://osv.dev/vulnerability/GHSA-x5fr-7hhj-34j3"}],"summary":"SurrealDB: Full Table Permissions by Default"}