Threats tagged 'ghsa-934p-hvjv-46qj'

SurrealDB versions prior to 3.3.0 have an unbounded recursion vulnerability that allows authenticated users to cause a stack overflow by creating deeply nested data structures. This can be exploited by repeatedly running UPDATE statements that wrap a stored array within itself, followed by SELECT or EXPORT operations, resulting in a persistent denial of service by aborting the surreald process.