GHSA-fpxg-5xmv-922mMedium· 4.3▾ SunlitSurrealDB has bypass of field-level SELECT permissions through JSON Patch `copy` and `move` with empty `from`
▾ Sunlit zone — Low / medium · no exploitation signal
impact 23.7 · likelihood 0 · exploitation 0
The latest CVEs are free to read. GHSA-fpxg-5xmv-922m is outside the free window — sign in (free) to view the full technical detail, affected versions, references, and raw markdown.