Threats tagged 'ghsa-7wmw-j7vc-669r'

SurrealDB versions before 3.3.0 have a use-after-free vulnerability in the surrealdb-core key-value backends. This flaw occurs when borrowed transaction state is passed into affinitypool::spawn_local closures that rely on future Drop for safety. If a Rust embedder leaks a dispatched future and drops the transaction, pool workers may access freed memory, potentially causing crashes or memory corruption.