Delskayn Rquickjs vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Delskayn Rquickjs: 1 record(s), with affected versions and fixes.cpe:2.3:a:delskayn:rquickjs
CVE-2024-58366
High · 8.8
CWE-134 Jul 18, 2026
SurrealDB before 1.1.1 Format String via Scripting Functions
SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled. Attackers with scripting privileges can supply format string sequences in error inputs to read arbitrary memory or execute code with SurrealDB process privileges.