Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 09:56:23 +0000 fkie_cve-2024-58368 https://db.gcve.eu/vuln/fkie_cve-2024-58368 <p>SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafted HTTP requests with malformed header values to trigger an uncaught exception that crashes the server.</p> <p>SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafted HTTP requests with malformed header values to trigger an uncaught exception that crashes the server.</p> https://db.gcve.eu/vuln/fkie_cve-2024-58368 Withdrawn: GHSA-f7q6-7rq9-3phx — Duplicate Advisory: Uncaught Exception processing HTTP Headers in SurrealDB https://db.gcve.eu/vuln/ghsa-f7q6-7rq9-3phx <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> crates.io: surrealdb</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-m24x-r6q3-2vp9. This link is maintained to preserve external references.</p> <p>## Original Description SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafted HTTP requests with malformed header values to trigger an uncaught exception that crashes the server.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> crates.io: surrealdb</p> <p>## Duplicate Advisory</p> <p>This advisory has been withdrawn because it is a duplicate of GHSA-m24x-r6q3-2vp9. This link is maintained to preserve external references.</p> <p>## Original Description SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters. Unauthenticated attackers can send crafted HTTP requests with malformed header values to trigger an uncaught exception that crashes the server.</p> https://db.gcve.eu/vuln/ghsa-f7q6-7rq9-3phx