{"id":"EUVD-2025-210486","enisaUuid":"5963aeae-0909-3c44-bbfe-be31d87a31fa","description":"SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace function that fails to restrict resulting string length when using regex patterns. An authenticated attacker can craft a malicious query to exhaust server memory through unbounded string allocations, causing denial of service.","datePublished":"Jul 18, 2026, 1:10:13 PM","dateUpdated":"Oct 29, 2026, 9:15:22 PM","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-3633-g6mg-p6qq\nhttps://www.vulncheck.com/advisories/surrealdb-before-memory-exhaustion-via-string-replace\n","aliases":"CVE-2025-71395\nGHSA-849x-5qr7-wxfm\n","assigner":"VulnCheck","epss":0.45,"enisaIdProduct":[{"id":"0ec5ee42-e57a-3867-b394-503d0cbed424","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c2.0.5"},{"id":"63bed86d-fa8d-38d9-a492-b263d5a6360d","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"2.2.0 \u003c2.2.2"},{"id":"6fe9f504-6d49-3191-9fdc-76441e7f4a22","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"2.1.0 \u003c2.1.5"}],"enisaIdVendor":[{"id":"795b4690-de78-3cd4-9b79-0641efe1ea6e","vendor":{"name":"surrealdb"}}],"enisaIdVulnerability":[{"id":"70af8ffc-dffd-3021-9d57-2391acf96dda","vulnerability":{"id":"GHSA-849x-5qr7-wxfm","description":"SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace function that fails to restrict resulting string length when using regex patterns. An authenticated attacker can craft a malicious query to exhaust server memory through unbounded string allocations, causing denial of service.","datePublished":"Jul 18, 2026, 3:31:49 PM","dateUpdated":"Aug 19, 2026, 6:32:00 PM","baseScore":0.0,"references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-3633-g6mg-p6qq\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-71395\nhttps://www.vulncheck.com/advisories/surrealdb-before-memory-exhaustion-via-string-replace\n","enisa_id":"EUVD-2025-210486\n","aliases":"GHSA-849x-5qr7-wxfm\nCVE-2025-71395\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:02:28 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f5599286-76d5-3186-848e-2fb542a31b7e","vulnerability":{"id":"CVE-2025-71395","description":"SurrealDB versions before 2.2.2 contain a memory exhaustion vulnerability in the string::replace function that fails to restrict resulting string length when using regex patterns. An authenticated attacker can craft a malicious query to exhaust server memory through unbounded string allocations, causing denial of service.","datePublished":"Jul 18, 2026, 1:10:13 PM","dateUpdated":"Oct 29, 2026, 9:15:22 PM","status":"PUBLISHED","baseScore":7.1,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","references":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-3633-g6mg-p6qq\nhttps://www.vulncheck.com/advisories/surrealdb-before-memory-exhaustion-via-string-replace\n","enisa_id":"EUVD-2025-210486\n","assigner":"VulnCheck","epss":0.45,"dataProcessed":"Nov 6, 2026, 7:20:40 AM","vulnerabilityProduct":[{"id":"1560c616-4c96-3e51-bdaf-dc430d822e37","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"2.2.0 \u003c2.2.2"},{"id":"3330a954-cf8c-321c-80b2-4c0f6dbe682a","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"2.1.0 \u003c2.1.5"},{"id":"b4525b3e-9de6-31a1-8f13-d5f2e75c6ee0","product":{"name":"surrealdb","vendor":{"name":"surrealdb"}},"product_version":"0 \u003c2.0.5"}],"vulnerabilityVendor":[{"id":"f0028694-82c2-3de0-8f67-d881e40be3b3","vendor":{"name":"surrealdb"}}]}}],"enisaIdAdvisory":[]}