Denial of service via deep operator chains in SurrealDB (CVE-2026-63737)

Authenticated users can crash a SurrealDB server by submitting a single query containing a long chain of operators (e.g., tens of thousands of chained addition terms). The query is parsed into an unbounded expression tree that overflows the thread stack when walked recursively during drop, formatting, or execution, aborting the entire process. This denies service to all namespaces and databases on the affected instance until it is restarted. Affected versions: - >= 3.0.0, < 3.1.5 We recommend updating to: 3.1.5. CVSS 7.1 · our assessment: this_week Reference: https://github.com/surrealdb/surrealdb/security/advisories/GHSA-jv2j-mqmw-xvv5 Details: https://vuln.today/cve/CVE-2026-63737