https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-12T09:56:22.076200+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2024-58358 fkie_cve-2024-58358 2026-11-12T09:56:22.078192+00:00

SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that allows privileged owner users to define users with nonexistent roles. Attackers can trigger an uncaught panic by signing in with a user assigned an invalid role, crashing the server.

 https://db.gcve.eu/vuln/ghsa-9qrf-6whp-92w3 Withdrawn: GHSA-9qrf-6whp-92w3 — Duplicate Advisory: SurrealDB has an Uncaught Exception Handling Nonexistent Role 2026-11-12T09:56:22.078258+00:00

Withdrawn by the publisher.

Affected: crates.io: surrealdb

## Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-jc55-246c-r88f. This link is maintained to preserve external references.

## Original Description SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that allows privileged owner users to define users with nonexistent roles. Attackers can trigger an uncaught panic by signing in with a user assigned an invalid role, crashing the server.