GHSA-6wr5-jmpr-mjcx: Uncaught Exception in Macro Expecting Native Function to Exist

February 21, 2024

The query executor would panic when executing a query containing a call to a built-in SurrealDB function that did not exist. This could occur accidentally in situations where the version of the SurrealDB client was newer than the SurrealDB server or when a pre-parsed query was provided to the server via a newer version of the SurrealDB SDK.

References

bugs.chromium.org/p/oss-fuzz/issues/detail?id=65755
github.com/advisories/GHSA-6wr5-jmpr-mjcx
github.com/surrealdb/surrealdb
github.com/surrealdb/surrealdb/pull/3454
github.com/surrealdb/surrealdb/security/advisories/GHSA-6wr5-jmpr-mjcx

Code Behaviors & Features

Detect and mitigate GHSA-6wr5-jmpr-mjcx with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →