{"id":"EUVD-2024-55680","enisaUuid":"b93228fc-3095-3933-87d2-659764e2784d","description":"SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on line terminator characters. Authorized clients can submit malformed queries that trigger a panic in the span rendering code, crashing the server and causing denial of service.","datePublished":"Jul 18, 2026, 1:10:05 PM","dateUpdated":"Jul 28, 2026, 1:47:51 AM","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-8xff-473h-f863\nhttps://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-parsing-error\n","aliases":"CVE-2024-58364\nGHSA-cqmh-qfgq-fxf4\n","assigner":"VulnCheck","epss":0.45,"enisaIdProduct":[{"id":"470602d8-ea3e-3059-861b-74fa0a6c0f09","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c1.2.1"}],"enisaIdVendor":[{"id":"8ace512a-896c-3255-a0de-ac80a7e0fb97","vendor":{"name":"surrealdb"}}],"enisaIdVulnerability":[{"id":"5fb3f6d5-1118-3ed7-9e5b-fc2ed8e94544","vulnerability":{"id":"CVE-2024-58364","description":"SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on line terminator characters. Authorized clients can submit malformed queries that trigger a panic in the span rendering code, crashing the server and causing denial of service.","datePublished":"Jul 18, 2026, 1:10:05 PM","dateUpdated":"Jul 28, 2026, 1:47:51 AM","status":"PUBLISHED","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-8xff-473h-f863\nhttps://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-parsing-error\n","enisa_id":"EUVD-2024-55680\n","assigner":"VulnCheck","epss":0.45,"dataProcessed":"Oct 29, 2026, 7:19:05 AM","vulnerabilityProduct":[{"id":"28ce2b60-4706-3b52-a0e4-2559603805bc","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c1.2.1"}],"vulnerabilityVendor":[{"id":"673ffab2-afa3-30b4-bd7a-cf260e9faf25","vendor":{"name":"surrealdb"}}]}},{"id":"b8466ad2-77d3-3118-ab1b-8a0dca19d89f","vulnerability":{"id":"GHSA-cqmh-qfgq-fxf4","description":"SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on line terminator characters. Authorized clients can submit malformed queries that trigger a panic in the span rendering code, crashing the server and causing denial of service.","datePublished":"Jul 18, 2026, 3:31:48 PM","dateUpdated":"Jul 18, 2026, 3:31:48 PM","baseScore":0.0,"references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-8xff-473h-f863\nhttps://nvd.nist.gov/vuln/detail/CVE-2024-58364\nhttps://www.vulncheck.com/advisories/surrealdb-before-denial-of-service-via-parsing-error\n","enisa_id":"EUVD-2024-55680\n","aliases":"CVE-2024-58364\nGHSA-cqmh-qfgq-fxf4\n","epss":0.0,"dataProcessed":"Oct 25, 2026, 1:57:47 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}