GHSA-xx7m-69ff-9crp
NoneCVSS
—
EPSS
—
Published
Feb 12, 2026
CISA due date
—
The record
SurrealDB vulnerable to Denial of Service through scripting function memory edge case
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | surrealdb | 0 | 2.6.1 |
| crates.io | surrealdb | 3.0.0-alpha.8 | 3.0.0-beta.3 |
Related vulnerabilities
- GHSA-3v2x-9xcv-2v2v SurrealDB Affected by Confused Deputy Privilege Escalation through Future Fields and… Also affects surrealdb
- CVE-2026-112405 Pillow is a Python imaging library. CWE-476
- CVE-2026-112392 Pillow is a Python imaging library. CWE-476
- CVE-2026-100348 kin-openapi is a Go project for handling OpenAPI files. CWE-476
- CVE-2026-100349 kin-openapi is a Go project for handling OpenAPI files. CWE-476
- CVE-2026-109280 ImageMagick 7.1.0-20 before 7.1.2-32 contains a use after free vulnerability in the -fx… CWE-476
- CVE-2026-109272 ImageMagick 7.1.1-31 before 7.1.2-32 contains a NULL pointer dereference in the… CWE-476
- CVE-2026-109258 ImageMagick 7.1.0-20 before 7.1.2-32 contains an invalid memory free vulnerability in the… CWE-476