Threats tagged 'ghsa-3rgm-63j6-74qx'

SurrealDB versions from 3.2.0 up to but not including 3.3.0 contain a server-side request forgery (SSRF) vulnerability in the FilteringResolver component. The vulnerability arises because the is_private_ip check does not properly unwrap certain IPv6 transition addresses (NAT64, 6to4, Teredo), allowing authenticated users to craft outbound HTTP requests via SurrealQL functions that can reach internal or localhost services and cloud metadata endpoints.