Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
SurrealDB before 2.2.2 with scripting enabled fails to properly enforce recursion limits when native functions contain embedded JavaScript that issues new queries. Authenticated attackers can bypass the recursion limit by chaining native and JavaScript function calls to trigger infinite recursion and exhaust server memory.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2025-71393 Infinite Recursion Memory Exhaustion in SurrealDB Before 2.2.2 With Scripting https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-71393
Post summary
The text announces a memory exhaustion vulnerability (CVE‑2025‑71393) affecting SurrealDB versions prior to 2.2.2 when scripting is enabled, with a link to a Vulmon detail page but no PoC or exploit information.
CVE-2025-71393 SurrealDB before 2.2.2 with scripting enabled fails to properly enforce recursion limits when native functions contain embedded JavaScript that issues new queries. Au… https://www.cve.org/CVERecord?id=CVE-2025-71393
Post summary
The passage reports a SurrealDB vulnerability (CVE-2025-71393) involving recursion limits in JavaScript‑embedded native functions, with no mention of PoC, exploit, patch, or active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | surrealdb | surrealdb | - | - | - |