https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 18:47:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-341690 EUVD-2026-341690 https://cve.radiocsirt.org/vuln/euvd-2026-341690 https://cve.radiocsirt.org/vuln/fkie_cve-2025-71398 <p>SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated users to bypass deny-net restrictions by redirecting to blocked IP addresses. Attackers can host a public server that redirects to denied network targets, enabling server-side request forgery to access internal endpoints and retrieve sensitive information.</p> <p>SurrealDB before 2.2.2 fails to validate HTTP redirects in http functions, allowing authenticated users to bypass deny-net restrictions by redirecting to blocked IP addresses. Attackers can host a public server that redirects to denied network targets, enabling server-side request forgery to access internal endpoints and retrieve sensitive information.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-71398 https://cve.radiocsirt.org/vuln/ghsa-5q9x-554g-9jgg <p><strong>Affected:</strong> crates.io: surrealdb</p> <p>SurrealDB offers http functions that can access external network endpoints. A typical, albeit [not recommended ](https://surrealdb.com/docs/surrealdb/reference-guide/security-best-practices#example-deny-all-capabilities-with-some-exceptions) configuration would be to start SurrealDB with all network connections allowed with the exception of a deny list. For example, `surreal start --allow-net --deny-net 10.0.0.0/8` will allow all network connections except to the 10.0.0.0/8 block.</p> <p>An authenticated user of SurrealDB can use redirects to bypass this restriction. For example by hosting a server on the public internet which redirects to the IP addresses blocked by the administrator of the SurrealDB server via HTTP 301 or 307 response codes.</p> <p>When sending SurrealDB statements containing the `http::*` functions to the attacker controlled host, the SurrealDB server will follow the redirects to the blocked IP address. Because the statements also return the responses to the attacker, this issue constitutes a full SSRF vulnerability.</p> <p>This issue was discovered and patched during an code audit and penetration test of SurrealDB by cure53, the severity as defined within cure53&#39;s preliminary finding is Medium, matched by our CVSS v4 assessment.</p> <p>### Impact</p> <p>The impact of this vulnerability is circumvention of the `--deny-net` capability and resulting impact on systems external to SurrealDB. The ultimate impact is dependent on the deployment scenario.</p> <p>For example, if the SurrealDB serv…</p> <p><strong>Affected:</strong> crates.io: surrealdb</p> <p>SurrealDB offers http functions that can access external network endpoints. A typical, albeit [not recommended ](https://surrealdb.com/docs/surrealdb/reference-guide/security-best-practices#example-deny-all-capabilities-with-some-exceptions) configuration would be to start SurrealDB with all network connections allowed with the exception of a deny list. For example, `surreal start --allow-net --deny-net 10.0.0.0/8` will allow all network connections except to the 10.0.0.0/8 block.</p> <p>An authenticated user of SurrealDB can use redirects to bypass this restriction. For example by hosting a server on the public internet which redirects to the IP addresses blocked by the administrator of the SurrealDB server via HTTP 301 or 307 response codes.</p> <p>When sending SurrealDB statements containing the `http::*` functions to the attacker controlled host, the SurrealDB server will follow the redirects to the blocked IP address. Because the statements also return the responses to the attacker, this issue constitutes a full SSRF vulnerability.</p> <p>This issue was discovered and patched during an code audit and penetration test of SurrealDB by cure53, the severity as defined within cure53&#39;s preliminary finding is Medium, matched by our CVSS v4 assessment.</p> <p>### Impact</p> <p>The impact of this vulnerability is circumvention of the `--deny-net` capability and resulting impact on systems external to SurrealDB. The ultimate impact is dependent on the deployment scenario.</p> <p>For example, if the SurrealDB serv…</p> https://cve.radiocsirt.org/vuln/ghsa-5q9x-554g-9jgg