com.arcadedb:arcadedb-console (24.1.1), com.arcadedb:arcadedb-coverage (24.1.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (24.1.1)

com.arcadedb:arcadedb-engine MAVEN version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.1.1 - com.arcadedb:arcadedb-coverage 24.1.1 -...

com.arcadedb:arcadedb-console (23.4.1), com.arcadedb:arcadedb-coverage (23.4.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.4.1)

com.arcadedb:arcadedb-engine MAVEN version 23.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.4.1 - com.arcadedb:arcadedb-coverage 23.4.1 -...

com.arcadedb:arcadedb-console (25.9.1), com.arcadedb:arcadedb-graphql (25.9.1) +12 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.9.1)

com.arcadedb:arcadedb-engine MAVEN version 25.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.9.1 - com.arcadedb:arcadedb-graphql 25.9.1 -...

com.arcadedb:arcadedb-console (25.4.1), com.arcadedb:arcadedb-coverage (25.4.1) +10 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.4.1)

com.arcadedb:arcadedb-engine MAVEN version 25.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.4.1 - com.arcadedb:arcadedb-coverage 25.4.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.7.1) +18 more potentially affected by unknown CVE via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.7.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.7.1 and more Source cves: unknown CVE Source advisory: GHSA-VWJC-V7X7-CM6G...

com.arcadedb:arcadedb-console (21.9.1-beta), com.arcadedb:arcadedb-coverage (21.9.1-beta) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (21.9.1-beta)

com.arcadedb:arcadedb-engine MAVEN version 21.9.1-beta is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.9.1-beta - com.arcadedb:arcadedb-coverage 21.9.1-beta -...

com.arcadedb:arcadedb-console (25.2.1), com.arcadedb:arcadedb-coverage (25.2.1) +10 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (25.2.1)

com.arcadedb:arcadedb-engine MAVEN version 25.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.2.1 - com.arcadedb:arcadedb-coverage 25.2.1 -...

com.arcadedb:arcadedb-console (25.1.1), com.arcadedb:arcadedb-coverage (25.1.1) +10 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (25.1.1)

com.arcadedb:arcadedb-engine MAVEN version 25.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.1.1 - com.arcadedb:arcadedb-coverage 25.1.1 -...

com.arcadedb:arcadedb-console (23.1.1), com.arcadedb:arcadedb-coverage (23.1.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (23.1.1)

com.arcadedb:arcadedb-engine MAVEN version 23.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.1.1 - com.arcadedb:arcadedb-coverage 23.1.1 -...

com.arcadedb:arcadedb-console (24.11.2), com.arcadedb:arcadedb-coverage (24.11.2) +9 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (24.11.2)

com.arcadedb:arcadedb-engine MAVEN version 24.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.11.2 - com.arcadedb:arcadedb-coverage 24.11.2 -...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection through the ScriptTriggerExecutor in engine/src/main/java/com/arcadedb/schema/trigger/ScriptTriggerExecutor.java. An attacker can execute OS commands by creating a JavaScript trigger that uses...

com.arcadedb:arcadedb-console (25.10.1), com.arcadedb:arcadedb-graphql (25.10.1) +12 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (25.10.1)

com.arcadedb:arcadedb-engine MAVEN version 25.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.10.1 - com.arcadedb:arcadedb-graphql 25.10.1 -...

com.arcadedb:arcadedb-console (21.9.1), com.arcadedb:arcadedb-coverage (21.9.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (21.9.1)

com.arcadedb:arcadedb-engine MAVEN version 21.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.9.1 - com.arcadedb:arcadedb-coverage 21.9.1 -...

ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)

ScriptTriggerExecutor sets allowedPackages to java.lang., java.util., java.time., java.math. ScriptTriggerExecutor.java:56; trigger creation is gated only at UPDATESCHEMA LocalSchema.createTrigger:636. Permitting java.lang. host-class lookup lets a trigger script do...

com.arcadedb:arcadedb-console (22.12.1), com.arcadedb:arcadedb-coverage (22.12.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (22.12.1)

com.arcadedb:arcadedb-engine MAVEN version 22.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.12.1 - com.arcadedb:arcadedb-coverage 22.12.1 -...

com.arcadedb:arcadedb-console (23.2.1), com.arcadedb:arcadedb-coverage (23.2.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (23.2.1)

com.arcadedb:arcadedb-engine MAVEN version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.2.1 - com.arcadedb:arcadedb-coverage 23.2.1 -...

com.arcadedb:arcadedb-console (23.3.1), com.arcadedb:arcadedb-coverage (23.3.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (23.3.1)

com.arcadedb:arcadedb-engine MAVEN version 23.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.3.1 - com.arcadedb:arcadedb-coverage 23.3.1 -...

com.arcadedb:arcadedb-console (23.4.1), com.arcadedb:arcadedb-coverage (23.4.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (23.4.1)

com.arcadedb:arcadedb-engine MAVEN version 23.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.4.1 - com.arcadedb:arcadedb-coverage 23.4.1 -...

com.arcadedb:arcadedb-console (23.10.1), com.arcadedb:arcadedb-coverage (23.10.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (23.10.1)

com.arcadedb:arcadedb-engine MAVEN version 23.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.10.1 - com.arcadedb:arcadedb-coverage 23.10.1 -...

com.arcadedb:arcadedb-console (24.6.1), com.arcadedb:arcadedb-coverage (24.6.1) +7 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (24.6.1)

com.arcadedb:arcadedb-engine MAVEN version 24.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.6.1 - com.arcadedb:arcadedb-coverage 24.6.1 -...