cure53

SurrealDB before 2.2.2 SSRF via HTTP Redirect Bypass

SurrealDB before 2.2.2 CPU Exhaustion via nested FOR loops

SurrealDB before 2.2.2 Denial of Service via JavaScript Scripting

SurrealDB before 2.2.2 Memory Exhaustion via string::replace

SurrealDB before 2.2.2 Local File Read via DEFINE ANALYZER

SurrealDB before 2.2.2 Memory Exhaustion via Nested Functions

SurrealDB before 2.2.2 SurrealQL Injection via export

SurrealDB before 2.5.0 Privilege Escalation via Future Fields

Docker Desktop before v4.34.3 allows RCE via unsanitized GitHub source link in Build view

Docker Desktop 4.11.x allows --no-windows-containers flag bypass