agentprime: surrealdbEvery new CVE for surrealdb.https://agentprime.io/CVE-2026-121423: SurrealDB before 3.3.0 DoS via Unbounded Recursion in val::Value Serializationhttps://agentprime.io/advisories/CVE-2026-121423/https://agentprime.io/advisories/CVE-2026-121423/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:19 GMTCVECVE-2026-121422: SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypasshttps://agentprime.io/advisories/CVE-2026-121422/https://agentprime.io/advisories/CVE-2026-121422/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:18 GMTCVECVE-2026-121421: SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypasshttps://agentprime.io/advisories/CVE-2026-121421/https://agentprime.io/advisories/CVE-2026-121421/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:18 GMTCVECVE-2026-121420: SurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition Addresseshttps://agentprime.io/advisories/CVE-2026-121420/https://agentprime.io/advisories/CVE-2026-121420/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:17 GMTCVECVE-2026-121419: SurrealDB 3.1.0 before 3.3.0 MCP Session Hijack via BoundSubject Collisionhttps://agentprime.io/advisories/CVE-2026-121419/https://agentprime.io/advisories/CVE-2026-121419/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:16 GMTCVECVE-2026-121418: SurrealDB 3.1.0 before 3.3.0 Incorrect Authorization via Streaming Index Plannerhttps://agentprime.io/advisories/CVE-2026-121418/https://agentprime.io/advisories/CVE-2026-121418/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:15 GMTCVECVE-2026-121417: SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV Backendshttps://agentprime.io/advisories/CVE-2026-121417/https://agentprime.io/advisories/CVE-2026-121417/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:15 GMTCVECVE-2026-121416: SurrealDB 2.0.0 before 3.3.1 deny-funcs Capability Bypass via Method-Style Invocationshttps://agentprime.io/advisories/CVE-2026-121416/https://agentprime.io/advisories/CVE-2026-121416/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 14:28:14 GMTCVECVE-2026-109343: SurrealDB before 3.3.0 Cross-Tenant Access via USE Statementhttps://agentprime.io/advisories/CVE-2026-109343/https://agentprime.io/advisories/CVE-2026-109343/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:28 GMTCVECVE-2026-109342: SurrealDB 3.0.0 before 3.3.0 Missing Authentication in revoke RPC Methodhttps://agentprime.io/advisories/CVE-2026-109342/https://agentprime.io/advisories/CVE-2026-109342/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:27 GMTCVECVE-2026-109341: SurrealDB before 3.3.0 Field Permission Bypass via PATCH copy/move/test Operationshttps://agentprime.io/advisories/CVE-2026-109341/https://agentprime.io/advisories/CVE-2026-109341/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:27 GMTCVECVE-2026-109340: SurrealDB 3.1.0 before 3.3.0 Authorization Bypass via REFERENCE ON DELETE CASCADEhttps://agentprime.io/advisories/CVE-2026-109340/https://agentprime.io/advisories/CVE-2026-109340/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:26 GMTCVECVE-2026-109339: SurrealDB 3.1.0 before 3.3.0 Memory Exhaustion via Surrealism Module Output Bufferinghttps://agentprime.io/advisories/CVE-2026-109339/https://agentprime.io/advisories/CVE-2026-109339/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:25 GMTCVECVE-2026-109338: SurrealDB before 3.3.0 Denial of Service via Headers Non-ASCII Valueshttps://agentprime.io/advisories/CVE-2026-109338/https://agentprime.io/advisories/CVE-2026-109338/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:25 GMTCVECVE-2026-109337: SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE Clausehttps://agentprime.io/advisories/CVE-2026-109337/https://agentprime.io/advisories/CVE-2026-109337/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:24 GMTCVECVE-2026-109336: SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT $before/$afterhttps://agentprime.io/advisories/CVE-2026-109336/https://agentprime.io/advisories/CVE-2026-109336/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:23 GMTCVECVE-2026-109335: SurrealDB 3.0.0 before 3.3.0 Information Disclosure via COMPUTED Fieldshttps://agentprime.io/advisories/CVE-2026-109335/https://agentprime.io/advisories/CVE-2026-109335/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:23 GMTCVECVE-2026-109334: SurrealDB before 3.3.0 Cross-Tenant Access via Surreal-NS/Surreal-DB Headers and RPC usehttps://agentprime.io/advisories/CVE-2026-109334/https://agentprime.io/advisories/CVE-2026-109334/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:22 GMTCVECVE-2026-109333: SurrealDB 3.0.0 before 3.3.0 Cross-Tenant Record Read via RETURN FETCHhttps://agentprime.io/advisories/CVE-2026-109333/https://agentprime.io/advisories/CVE-2026-109333/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 16:05:21 GMTCVECVE-2026-102876: SurrealDB before 3.3.0 Cross-Tenant Access via Headershttps://agentprime.io/advisories/CVE-2026-102876/https://agentprime.io/advisories/CVE-2026-102876/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 20:01:06 GMTCVECVE-2026-63736: SurrealDB before 3.2.0 SSRF via JWKS URL hostname resolutionhttps://agentprime.io/advisories/CVE-2026-63736/https://agentprime.io/advisories/CVE-2026-63736/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 12:04:32 GMTCVECVE-2026-63734: SurrealDB before 3.2.0 Denial of Service via malformed SurrealML importhttps://agentprime.io/advisories/CVE-2026-63734/https://agentprime.io/advisories/CVE-2026-63734/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Jul 2026 12:04:30 GMTCVE