v2.0.5

Thu, 10 Apr 2025 00:00:00 GMT

Bug Fixes:

* [Check limit to string::replace with regular expressions](https://github.com/surrealdb/surrealdb/pull/5637)
* [Fixes long running FOR loops, adds script timeouts, improves HTTP redirect security, and optimizes task yielding for better performance](https://github.com/surrealdb/surrealdb/pull/5597)
* [Backport JS scripting mem exhaustion fix](https://github.com/surrealdb/surrealdb/commit/7798a08aa04e9171a52f22b64b864ab156e4be63)
* [Introduces Regex size limit configuration](https://github.com/surrealdb/surrealdb/pull/5638)
* [Improve error handling on value conversion (RPC / HTTP/SQL endpoint)](https://github.com/surrealdb/surrealdb/commit/9c4cfb08e3162c768c1143bf2343acdf72770f3d)
* [Update rquickjs to newest version](https://github.com/surrealdb/surrealdb/pull/5668)

Security Advisories:

* [Uncaught exception in Net module leads to database crash](https://github.com/surrealdb/surrealdb/security/advisories/GHSA-rq86-9m6r-cm3g)
* [Server-takeover via SurrealQL injection on backup import](https://github.com/surrealdb/surrealdb/security/advisories/GHSA-ccj3-5p93-8p42)
* [Memory exhaustion via nested functions and scripts](https://github.com/surrealdb/surrealdb/security/advisories/GHSA-m7rc-8w7m-r9qr)
* [Memory exhaustion via string::replace using regex](https://github.com/surrealdb/surrealdb/security/advisories/GHSA-3633-g6mg-p6qq)
* [No JavaScript script function default timeout could facilitate DoS](https://github.com/surrealdb/surrealdb/security/advisories/GHSA-3824-qmfq-2qv7)
* [CPU exhaustion via custom functions result in total DoS](https://github.com/surrealdb/surrealdb/security/advisories/GHSA-pxw4-94j3-v9pf)
* [Bypass of deny-net flags via redirect results in SSRF](https://github.com/surrealdb/surrealdb/security/advisories/GHSA-5q9x-554g-9jgg)