This advisory has been withdrawn because it is a duplicate of GHSA-6wr5-jmpr-mjcx. This link is maintained to preserve external references.

SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions. Authorized clients can craft pre-parsed queries invoking nonexistent functions to trigger a panic that crashes the server.