CVE-2026-121417 - SurrealDB before 3.3.0 Use-After-Free via affinitypool spawn_local in KV Backends
CVE ID :CVE-2026-121417 Published : Nov. 3, 2026, 2:28 p.m. | 36 minutes ago Description :SurrealDB before 3.3.0 contains a use-after-free vulnerability in surrealdb-core KV backends that pass borrowed transaction state into affinitypool::spawn_local closures relying on future Drop for...