Is surrealdb-core safe to use? Its security history

Every advisory, newest first

• VulnerabilityGHSA-66r2-5gwj-gxm2 · 2026-09-04SurrealDB: Writes in a PERMISSIONS clause bypass table permissions
• VulnerabilityGHSA-27vq-hv74-7cqp · 2024-12-16SurrealDB has Silent Failure to Overwrite Table Definition of Relation Type
• VulnerabilityGHSA-m52v-24p8-654f · 2024-11-22SurrealDB has an Uncaught Exception Sorting Tables by Random Order
• VulnerabilityGHSA-jc55-246c-r88f · 2024-11-22SurrealDB has an Uncaught Exception Handling Nonexistent Role
• VulnerabilityGHSA-h4f5-h82v-5w4r · 2024-11-22SurrealDB has an Uncaught Exception in Function Generating Random Time
• VulnerabilityGHSA-9722-9j67-vjcr · 2024-10-08SurrealDB: Improper Authorization in Select Permissions
• VulnerabilityGHSA-qjrv-v6qp-x99x · 2024-10-08SurrealDB has an Uncaught Exception Handling Parsing Errors on Empty Strings
• VulnerabilityGHSA-64f8-pjgr-9wmr · 2024-09-11Untrusted Query Object Evaluation in RPC API
• VulnerabilityGHSA-gh9f-6xm2-c4j2 · 2024-07-11SurrealDB vulnerable to Improper Authentication when Changing Databases as Scope User

Check your version

Run cargo tree -i surrealdb-core to see which version you build and why, or paste your Cargo.lock into the Cargo.toml checker to match every advisory against your exact versions.

RustSec advisories (CC0-1.0) and GitHub-reviewed advisories via OSV's crates.io export, downloaded Oct 24, 2026.