{"api_version":"v1","generated_at":"2026-10-09T15:30:00+00:00","product":{"cve_count":58,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-surrealdb-surrealdb-2d7c667783e3","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/surrealdb","name":"surrealdb","next_cursor":"djE6NTA","observations":[{"affected":"surrealdb: < 3.3.0","affected_versions_present":true,"cve_id":"CVE-2026-102876","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-102876","fixed":"surrealdb: 3.3.0","last_modified":"2026-10-02T12:25:20.288Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-vx2p-7hhm-wv62","primary_source":"","published":"2026-09-29T20:01:06.088Z"},{"affected":"< 2.5.0; 3.0.0-alpha.1 < 3.0.0-beta.3","affected_versions_present":true,"cve_id":"CVE-2026-63763","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63763","fixed":"2.5.0; 3.0.0-beta.3","last_modified":"2026-07-28T01:05:52.965Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-3v2x-9xcv-2v2v","primary_source":"","published":"2026-07-20T12:04:52.407Z"},{"affected":"surrealdb: < 2.6.1, < 3.0.0-beta.3","affected_versions_present":true,"cve_id":"CVE-2026-63762","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63762","fixed":"surrealdb: 2.6.1, 3.0.0-beta.3","last_modified":"2026-10-08T15:23:51.846Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-xx7m-69ff-9crp","primary_source":"","published":"2026-07-20T12:04:51.673Z"},{"affected":"surrealdb: < 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63761","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63761","fixed":"surrealdb: 3.1.0","last_modified":"2026-10-08T15:23:50.610Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-fwg2-gr34-q3w8","primary_source":"","published":"2026-07-20T12:04:50.878Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63760","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63760","fixed":"3.1.0","last_modified":"2026-07-28T01:05:50.760Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-q729-696q-g9pq","primary_source":"","published":"2026-07-20T12:04:49.892Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63759","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63759","fixed":"3.1.0","last_modified":"2026-07-28T01:05:50.034Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-q8qp-67f9-wr3f","primary_source":"","published":"2026-07-20T12:04:49.105Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63758","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63758","fixed":"3.1.0","last_modified":"2026-07-28T01:05:49.302Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-gcwr-5mrf-fvch","primary_source":"","published":"2026-07-20T12:04:48.367Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63757","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63757","fixed":"3.1.0","last_modified":"2026-07-28T01:05:48.619Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-5qfp-32cf-69jh","primary_source":"","published":"2026-07-20T12:04:47.616Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63756","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63756","fixed":"3.1.0","last_modified":"2026-07-28T01:05:47.907Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-4vgr-h27g-cf9p","primary_source":"","published":"2026-07-20T12:04:46.863Z"},{"affected":"surrealdb: < 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63755","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63755","fixed":"surrealdb: 3.1.0","last_modified":"2026-10-08T15:23:50.053Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-98fx-66cf-fc7c","primary_source":"","published":"2026-07-20T12:04:46.096Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63754","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63754","fixed":"3.1.0","last_modified":"2026-07-28T01:05:46.549Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-4v76-cw68-4vc9","primary_source":"","published":"2026-07-20T12:04:45.256Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63753","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63753","fixed":"3.1.0","last_modified":"2026-07-28T01:05:45.882Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-4m82-p8cx-f94j","primary_source":"","published":"2026-07-20T12:04:44.546Z"},{"affected":"surrealdb: < 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63752","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63752","fixed":"surrealdb: 3.1.0","last_modified":"2026-10-08T15:23:49.220Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-f82j-v89j-mf86","primary_source":"","published":"2026-07-20T12:04:43.796Z"},{"affected":"surrealdb: < 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63751","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63751","fixed":"surrealdb: 3.1.0","last_modified":"2026-10-08T15:23:48.324Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-fpxg-5xmv-922m","primary_source":"","published":"2026-07-20T12:04:43.103Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63750","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63750","fixed":"3.1.0","last_modified":"2026-07-28T01:05:43.776Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-65rj-r9fh-jp2v","primary_source":"","published":"2026-07-20T12:04:42.403Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63749","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63749","fixed":"3.1.0","last_modified":"2026-07-28T01:05:43.061Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6wqw-vhfr-9999","primary_source":"","published":"2026-07-20T12:04:41.628Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63748","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63748","fixed":"3.1.0","last_modified":"2026-07-28T01:05:42.327Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6g9v-7gq3-p2c6","primary_source":"","published":"2026-07-20T12:04:40.925Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63747","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63747","fixed":"3.1.0","last_modified":"2026-07-28T01:05:41.626Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-wjjj-24cx-f28g","primary_source":"","published":"2026-07-20T12:04:40.140Z"},{"affected":"surrealdb: < 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63746","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63746","fixed":"surrealdb: 3.1.0","last_modified":"2026-10-08T15:23:47.527Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-vjjx-rfw4-rmfc","primary_source":"","published":"2026-07-20T12:04:39.370Z"},{"affected":"surrealdb: < 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63745","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63745","fixed":"surrealdb: 3.1.0","last_modified":"2026-10-08T15:23:46.270Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6vg3-hgrw-p5gf","primary_source":"","published":"2026-07-20T12:04:38.681Z"},{"affected":"< 3.1.5","affected_versions_present":true,"cve_id":"CVE-2026-63744","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63744","fixed":"3.1.5","last_modified":"2026-07-28T01:05:39.475Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-h5rg-8p7f-47g2","primary_source":"","published":"2026-07-20T12:04:37.892Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63743","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63743","fixed":"3.1.0","last_modified":"2026-07-28T01:05:38.777Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-97vg-427p-8hx5","primary_source":"","published":"2026-07-20T12:04:37.125Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63742","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63742","fixed":"3.1.0","last_modified":"2026-07-28T01:05:38.097Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-c8jx-96c9-8xrp","primary_source":"","published":"2026-07-20T12:04:36.415Z"},{"affected":"< 3.1.0","affected_versions_present":true,"cve_id":"CVE-2026-63741","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63741","fixed":"3.1.0","last_modified":"2026-07-28T01:05:37.401Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-wp87-mgvq-5j93","primary_source":"","published":"2026-07-20T12:04:35.585Z"},{"affected":"< 3.1.4","affected_versions_present":true,"cve_id":"CVE-2026-63740","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63740","fixed":"3.1.4","last_modified":"2026-07-28T01:05:36.685Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-8rw6-p7m8-63jp","primary_source":"","published":"2026-07-20T12:04:34.904Z"},{"affected":"< 3.1.5","affected_versions_present":true,"cve_id":"CVE-2026-63739","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63739","fixed":"3.1.5","last_modified":"2026-07-28T01:05:35.993Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-cc8f-fcx3-gpjr","primary_source":"","published":"2026-07-20T12:04:34.209Z"},{"affected":"3.1.0 < 3.1.5","affected_versions_present":true,"cve_id":"CVE-2026-63738","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63738","fixed":"3.1.5","last_modified":"2026-07-28T01:05:35.271Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-hv6h-hc26-q48p","primary_source":"","published":"2026-07-20T12:04:33.530Z"},{"affected":"3.0.0 < 3.1.5","affected_versions_present":true,"cve_id":"CVE-2026-63737","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63737","fixed":"3.1.5","last_modified":"2026-07-28T01:05:34.574Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-jv2j-mqmw-xvv5","primary_source":"","published":"2026-07-20T12:04:32.829Z"},{"affected":"< 3.2.0","affected_versions_present":true,"cve_id":"CVE-2026-63736","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63736","fixed":"3.2.0","last_modified":"2026-07-28T01:05:33.864Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-5x4x-2946-qr67","primary_source":"","published":"2026-07-20T12:04:32.124Z"},{"affected":"< 3.2.0","affected_versions_present":true,"cve_id":"CVE-2026-63735","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63735","fixed":"3.2.0","last_modified":"2026-07-28T01:05:33.142Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-848m-r628-vrxw","primary_source":"","published":"2026-07-20T12:04:31.479Z"},{"affected":"< 3.2.0","affected_versions_present":true,"cve_id":"CVE-2026-63734","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63734","fixed":"3.2.0","last_modified":"2026-07-28T01:05:32.443Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-jwr6-6444-28xv","primary_source":"","published":"2026-07-20T12:04:30.773Z"},{"affected":"< 3.2.0","affected_versions_present":true,"cve_id":"CVE-2026-63733","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-63733","fixed":"3.2.0","last_modified":"2026-07-28T01:05:31.722Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-66r2-5gwj-gxm2","primary_source":"","published":"2026-07-20T12:04:30.055Z"},{"affected":"surrealdb: < 2.2.2, < 2.1.5, < 2.0.5","affected_versions_present":true,"cve_id":"CVE-2025-71398","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-71398","fixed":"surrealdb: 2.2.2, 2.1.5, 2.0.5","last_modified":"2026-07-28T01:48:20.325Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-5q9x-554g-9jgg","primary_source":"","published":"2026-07-18T13:10:15.797Z"},{"affected":"surrealdb: < 2.2.2, < 2.1.5, < 2.0.5","affected_versions_present":true,"cve_id":"CVE-2025-71397","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-71397","fixed":"surrealdb: 2.2.2, 2.1.5, 2.0.5","last_modified":"2026-10-08T15:21:31.361Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-pxw4-94j3-v9pf","primary_source":"","published":"2026-07-18T13:10:15.129Z"},{"affected":"surrealdb: < 2.2.2, < 2.0.5, < 2.1.5","affected_versions_present":true,"cve_id":"CVE-2025-71396","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-71396","fixed":"surrealdb: 2.2.2, 2.0.5, 2.1.5","last_modified":"2026-10-08T15:21:30.739Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-3824-qmfq-2qv7","primary_source":"","published":"2026-07-18T13:10:14.441Z"},{"affected":"surrealdb: < 2.2.2, < 2.1.5, < 2.0.5","affected_versions_present":true,"cve_id":"CVE-2025-71395","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-71395","fixed":"surrealdb: 2.2.2, 2.1.5, 2.0.5","last_modified":"2026-10-08T15:21:30.158Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-3633-g6mg-p6qq","primary_source":"","published":"2026-07-18T13:10:13.744Z"},{"affected":"surrealdb: < 2.2.2, < 2.1.5","affected_versions_present":true,"cve_id":"CVE-2025-71394","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-71394","fixed":"surrealdb: 2.2.2, 2.1.5","last_modified":"2026-07-28T01:48:17.603Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-2cvj-g5r5-jrrg","primary_source":"","published":"2026-07-18T13:10:13.041Z"},{"affected":"surrealdb: < 2.2.2, < 2.1.5, < 2.0.5","affected_versions_present":true,"cve_id":"CVE-2025-71393","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-71393","fixed":"surrealdb: 2.2.2, 2.1.5, 2.0.5","last_modified":"2026-10-08T15:21:29.335Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-m7rc-8w7m-r9qr","primary_source":"","published":"2026-07-18T13:10:12.360Z"},{"affected":"surrealdb: < 2.2.2, < 2.1.5, < 2.0.5","affected_versions_present":true,"cve_id":"CVE-2025-71392","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-71392","fixed":"surrealdb: 2.2.2, 2.1.5, 2.0.5","last_modified":"2026-10-08T15:21:28.130Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-ccj3-5p93-8p42","primary_source":"","published":"2026-07-18T13:10:11.661Z"},{"affected":"surrealdb: < 2.2.2, < 2.1.5, < 2.0.5","affected_versions_present":true,"cve_id":"CVE-2025-71391","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-71391","fixed":"surrealdb: 2.2.2, 2.1.5, 2.0.5","last_modified":"2026-10-08T15:21:26.277Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-rq86-9m6r-cm3g","primary_source":"","published":"2026-07-18T13:10:10.977Z"},{"affected":"surrealdb: \u2264 2.1.7, 2.2.0 < 2.2.6, 2.3.0 < 2.3.6, 3.0.0-alpha.1 \u2264 3.0.0-alpha.7","affected_versions_present":true,"cve_id":"CVE-2025-71390","cve_url":"https://cve.blacktree.nl/cve/CVE-2025-71390","fixed":"surrealdb: 2.2.6, 2.3.6","last_modified":"2026-07-28T01:48:14.882Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-m3c3-78fh-w3w7","primary_source":"","published":"2026-07-18T13:10:10.319Z"},{"affected":"< 1.1.0","affected_versions_present":true,"cve_id":"CVE-2024-58370","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-58370","fixed":"1.1.0","last_modified":"2026-07-28T01:47:55.449Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6r8p-hpg7-825g","primary_source":"","published":"2026-07-18T13:10:09.658Z"},{"affected":"< 1.1.1","affected_versions_present":true,"cve_id":"CVE-2024-58369","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-58369","fixed":"1.1.1","last_modified":"2026-07-28T01:47:54.726Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-jm4v-58r5-66hj","primary_source":"","published":"2026-07-18T13:10:08.965Z"},{"affected":"< 1.1.0","affected_versions_present":true,"cve_id":"CVE-2024-58368","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-58368","fixed":"1.1.0","last_modified":"2026-07-28T01:47:54.003Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-m24x-r6q3-2vp9","primary_source":"","published":"2026-07-18T13:10:08.303Z"},{"affected":"< 2.0.4","affected_versions_present":true,"cve_id":"CVE-2024-58367","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-58367","fixed":"2.0.4","last_modified":"2026-07-28T01:47:53.305Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-9722-9j67-vjcr","primary_source":"","published":"2026-07-18T13:10:07.604Z"},{"affected":"< 1.1.1; < 0.4.2","affected_versions_present":true,"cve_id":"CVE-2024-58366","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-58366","fixed":"1.1.1; 0.4.2","last_modified":"2026-07-28T01:47:52.571Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-q3gg-m8hr-h4x4","primary_source":"","published":"2026-07-18T13:10:06.939Z"},{"affected":"< 1.2.0","affected_versions_present":true,"cve_id":"CVE-2024-58365","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-58365","fixed":"1.2.0","last_modified":"2026-07-28T01:47:51.921Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-6wr5-jmpr-mjcx","primary_source":"","published":"2026-07-18T13:10:06.241Z"},{"affected":"< 1.2.1","affected_versions_present":true,"cve_id":"CVE-2024-58364","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-58364","fixed":"1.2.1","last_modified":"2026-07-28T01:47:51.243Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-8xff-473h-f863","primary_source":"","published":"2026-07-18T13:10:05.569Z"},{"affected":"< 1.5.4; < 2.0.0-alpha.6; < 1.5.1","affected_versions_present":true,"cve_id":"CVE-2024-58363","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-58363","fixed":"1.5.4; 2.0.0-alpha.6; 1.5.1","last_modified":"2026-07-28T01:47:50.565Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-gh9f-6xm2-c4j2","primary_source":"","published":"2026-07-18T13:10:04.938Z"},{"affected":"< 1.5.5; 2.0.0-beta.1 < 2.0.0-beta.3; < 1.5.2","affected_versions_present":true,"cve_id":"CVE-2024-58362","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-58362","fixed":"1.5.5; 2.0.0-beta.3; 1.5.2","last_modified":"2026-07-28T01:47:49.887Z","patch_url":"https://github.com/surrealdb/surrealdb/security/advisories/GHSA-64f8-pjgr-9wmr","primary_source":"","published":"2026-07-18T13:10:04.263Z"}],"source_generated_at":"2026-10-09T06:17:25.511Z","vendor":"surrealdb"}}