-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| surrealdb | rust | <= 1.1.1 | 1.2.0 |
RustRustMiggo AIRoot Cause AnalysisThe vulnerability occurs when executing queries with non-existent built-in functions. The pull request #3454 specifically addresses panic handling in the executor when invalid function names are passed. In Rust, such panics typically occur from unwrap()/expect() calls on Option/Result types. The 'execute_function' method in the executor would be the logical location for function dispatch, where missing error handling for undefined functions would cause panics. The high confidence comes from the PR's explicit mention of fixing executor panic behavior and typical Rust error handling patterns.
KEV Misses 88% of Exploited CVEs- Get the report