PT-2026-61575 · Surrealdb · Surrealdb

Darkamaul · CVE-2026-63759 · Publicado 2026-07-20 · Atualizado 2026-07-20

NVD

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SurrealDB before 3.1.0 fails to enforce recursion depth limits in the type/kind parser when processing nested type annotations. Authenticated attackers can send queries with deeply nested type annotations to exhaust server memory and crash the process.

Correção

Uncontrolled Recursion

Enumeração de Fraquezas

CWE-674

Identificadores relacionados

CVE-2026-63759

Produtos afetados

Surrealdb

Referências · 3

• https://github.com/surrealdb/surrealdb/security/advisories/GHSA-q8qp-67f9-wr3f · Aviso do Fabricante
• https://vulncheck.com/advisories/surrealdb-before-denial-of-service-nested-type-annotations · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-63759 · Nota de Segurança