CVE-2024-58357: Surrealdb

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() function that panics when unwrap is called on a None result from timestamp_opt. Authorized clients can repeatedly invoke rand::time() to reliably trigger server panics and cause denial of service.

Affected products

• Surrealdb Surrealdb: before 2.1.0 (fixed in 2.1.0)

Published 2026-07-18. Last modified 2026-08-12.