CVE Tools
Track your stack

Surrealdb

57 CVEs tracked since 2026. Since Jul 2026, none of them reached CISA KEV.

Surrealdb CVEs per month

Jul 2026 to Jul 2026. Point at a month, or focus the strip and use the arrow keys.
Surrealdb CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-07570

Products

The products that kept showing up in Surrealdb's monthly top three, with their CVEs summed over those months.

  1. Surrealdb571 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Surrealdb.

  1. CVE-2026-63763SurrealDB before 2.5.0 Privilege Escalation via Future Fields8.8
  2. CVE-2026-63762SurrealDB before v2.6.1 Denial of Service via scripting6.5
  3. CVE-2026-63761SurrealDB before 3.1.0 Algorithm Downgrade via ES5124.3
  4. CVE-2026-63760SurrealDB before 3.1.0 Denial of Service via JSON Parser7.5
  5. CVE-2026-63759SurrealDB before 3.1.0 Denial of Service nested type annotations6.5
  6. CVE-2026-63758SurrealDB before 3.1.0 Authorization Bypass via KILL Statement5.4
  7. CVE-2026-63757SurrealDB before 3.1.0 Session Hijacking via /rpc sessions8.8
  8. CVE-2026-63756SurrealDB before 3.1.0 Privilege Escalation via RPC Session Race Condition8.1
  9. CVE-2026-63755SurrealDB before 3.1.0 Permission Bypass via WHERE Clause6.5
  10. CVE-2026-63754SurrealDB before 3.1.0 Denial of Service via LIVE Query6.5
  11. CVE-2026-63753SurrealDB before 3.1.0 Authentication Bypass via LIVE Query4.3
  12. CVE-2026-63751SurrealDB before 3.1.0 Field Permission Bypass via JSON Patch4.3
  13. CVE-2026-63752SurrealDB before 3.1.0 RELATE Statement Record Overwrite4.3
  14. CVE-2026-63750SurrealDB before 3.1.0 Memory Amplification via /sql WebSocket5.3
  15. CVE-2026-63749SurrealDB before 3.1.0 Authentication Bypass via LIVE SELECT4.3

The record

Peak rank
#13 in Jul 2026
Busiest month shown
Jul 2026, 57 CVEs
Months with a KEV entry
0 since Jul 2026
Monthly snapshots
1 since 2026
Surrealdb's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store