Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

cargo surrealdb-core Security Advisories

Browse all Security Advisories for cargo surrealdb-core

Loading...
High
GSA_kwCzR0hTQS05NzIyLTlqNjctdmpjcs4ABAFl
Improper Authorization in Select Permissions
Ecosystems: cargo
Packages: surrealdb-core, surrealdb
Source: GitHub Advisory Database
Blast Radius: 14.3
Published: about 1 month ago
High
GSA_kwCzR0hTQS1xanJ2LXY2cXAteDk5eM4ABAFk
SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings
Ecosystems: cargo
Packages: surrealdb-core, surrealdb
Source: GitHub Advisory Database
Blast Radius: 14.3
Published: about 1 month ago
High
GSA_kwCzR0hTQS02NGY4LXBqZ3ItOXdtcs4AA_eW
Untrusted Query Object Evaluation in RPC API
Ecosystems: cargo
Packages: surrealdb, surrealdb-core
Source: GitHub Advisory Database
Blast Radius: 19.3
Published: about 2 months ago
Moderate
GSA_kwCzR0hTQS1naDlmLTZ4bTItYzRqMs4AA9zl
SurrealDB vulnerable to Improper Authentication when Changing Databases as Scope User
Ecosystems: cargo
Packages: surrealdb-core, surrealdb
Source: GitHub Advisory Database
Blast Radius: 13.9
Published: 4 months ago
Statistics
Advisories: 20,541
Packages: 8,998
Repositories: 1
Ecosystems: 12
Filter by Package
openssl-src 26 ckb 22 wasmtime 19 rusqlite 16 deno 13 surrealdb 12 openssl 8 hyper 7 libpulse-binding 7 Simple-Wayland-HotKey-Daemon 6 cargo 6 cranelift-codegen 6 sized-chunks 6 apollo-router 6 smallvec 6 bottlerocket/update-operator 5 messagepack-rs 5 tauri 5 xcb 5 lock_api 5 comrak 5 actix-web 4 deno_runtime 4 tokio 4 raw-cpuid 4 surrealdb-core 4 tremor-script 4 gitoxide 4 pleaser 4 evm 4 ammonia 3 id-map 3 apache-avro 3 anoncreds-clsignatures 3 ursa 3 crossbeam-channel 3 arrow 3 solana_rbpf 3 routinator 3 s2n-quic 3 fltk 3 flatbuffers 3 gix-path 3 grin 3 russh 3 gitoxide-core 3 matrix-sdk-crypto 3 crossbeam 3 gix 3 pallet-ethereum 3 quiche 3 ntpd 3 h2 3 arr 3 slice-deque 3 nanorand 3 tough 3 acc_reader 3 cgc 3 mopa 2 tectonic_xdv 2 internment 2 v9 2 signal-simple 2 pyo3 2 tiny_future 2 bumpalo 2 buffoon 2 streebog 2 bronzedb-protocol 2 gix-index 2 github.com/CosmWasm/wasmvm 2 simple-slab 2 failure 2 pywasm3 2 ticketed_lock 2 wasm3 2 hyper-staticfile 2 rust-embed 2 cosmwasm-vm 2 gix-worktree-state 2 rdiff 2 slack-morphism 2 gix-worktree 2 ash 2 rsa 2 async-h1 2 zerocopy 2 reorder 2 rocket 2 libgit2-sys 2 vodozemac 2 multiqueue 2 phonenumber 2 quinn-proto 2 vm-memory 2 Deno 2 cache 2 biscuit-auth 2 crayon 2 diesel 2 oqs 2 nano-id 2 evm-core 2 arenavec 2 tar 2 inventory 2 parc 2 futures-task 2 derive-com-impl 2 pallet-evm-precompile-modexp 2 abi_stable 2 cocoon 2 memoffset 2 spin 2 coreos-installer 2 simple_asn1 2 ordnung 2 svix 2 array-macro 2 toodee 2 trust-dns-server 2 stack_dst 2 lettre 2 gix-transport 2 rand_core 2 tower-http 2 net2 2 ncurses 2 nix 2 molecule 2 columnar 2 image 2 abomonation 2 sodiumoxide 2 syncpool 2 actix-http 2 ozone 2 crypto2 2 generator 2 libsecp256k1 2 opcua 2 csv-sniffer 2 traitobject 2 sequoia-openpgp 2 mio 2 metrics-util 2 libp2p-core 2 sha2 2 lru 2 futures-util 2 async-graphql 2 gfx-auxil 2 s2n-tls 2 slock 2 http 2 flumedb 2 rulex 2 pnet 2 binjs_io 2 tor-circmgr 2 bite 2 vec-const 2 arti 2 algorithmica 1 dbn 1 lz4-sys 1 self_cell 1 stack 1 cookie 1 linked_list_allocator 1 libflate 1 uu_od 1 stellar-strkey 1 orion 1 branca 1 ink_env 1 ink 1 git-url-parse 1 anymap 1 webpki 1 claxon 1 rkyv 1 multiqueue2 1 borsh 1 yamux 1 static-web-server 1 simd-json 1 grep-cli 1 glsl-layout 1 aes-gcm 1 paramiko 1 golang.org/x/crypto 1 ark-r1cs-std 1 cyfs-base 1 fruity 1 tungstenite 1 trillium-http 1 mail-internals 1 rustls-webpki 1