https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T06:24:42.248522+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-341469 EUVD-2026-341469 2026-10-09T06:24:42.273410+00:00 EUVD-2026-341469 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63734 fkie_cve-2026-63734 2026-10-09T06:24:42.273444+00:00

SurrealDB versions before 3.2.0 contain a denial of service vulnerability in the SurrealML header parser that allows authenticated Owner-role users to crash the server by uploading a malformed .surml file to the /ml/import endpoint. Attackers can supply non-numeric input-dimensions or other malformed header fields that trigger unchecked unwrap calls, causing a panic that aborts the entire server process and denies service to all databases.

 https://cve.radiocsirt.org/vuln/ghsa-vm8f-3v3v-fhw4 GHSA-vm8f-3v3v-fhw4 2026-10-09T06:24:42.273477+00:00

SurrealDB versions before 3.2.0 contain a denial of service vulnerability in the SurrealML header parser that allows authenticated Owner-role users to crash the server by uploading a malformed .surml file to the /ml/import endpoint. Attackers can supply non-numeric input-dimensions or other malformed header fields that trigger unchecked unwrap calls, causing a panic that aborts the entire server process and denies service to all databases.