← Database

CVE-2026-63759

MEDIUM CVSS: 6.5 Published: 2026-07-20 Modified: 2026-07-23

Description

SurrealDB before 3.1.0 fails to enforce recursion depth limits in the type/kind parser when processing nested type annotations. Authenticated attackers can send queries with deeply nested type annotations to exhaust server memory and crash the process.

Affected Platforms

Surrealdb Surrealdb

Weakness Type

CWE-674

References