SurrealDB 2.5

Features:

• •

  Added DEFER keyword for background index building and maintenance (Experimental)

• •

  Added an auth_limit on defined APIs, functions, fields and events, that limits execution to the permissions of the creating user instead of the invoking user.

Security Advisories:

• •

  Confused Deputy Privilege Escalation through Future Fields and Functions

Note: Storable closures in future fields and functions are now disabled by default for security reasons. To enable the previous behaviour, set the SURREAL_CAPS_ALLOW_INSECURE_STORABLE_CLOSURES environment variable. This change addresses the security vulnerability described in Advisory.