com.arcadedb:arcadedb-console (22.8.1), com.arcadedb:arcadedb-coverage (22.8.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (22.8.1)

com.arcadedb:arcadedb-engine MAVEN version 22.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.8.1 - com.arcadedb:arcadedb-coverage 22.8.1 -...

GHSA-X9F9-R4M8-9XC2 ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE)

ScriptTriggerExecutor sets allowedPackages to java.lang., java.util., java.time., java.math. ScriptTriggerExecutor.java:56; trigger creation is gated only at UPDATESCHEMA LocalSchema.createTrigger:636. Permitting java.lang. host-class lookup lets a trigger script do...

com.arcadedb:arcadedb-console (25.9.1), com.arcadedb:arcadedb-graphql (25.9.1) +12 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (25.9.1)

com.arcadedb:arcadedb-engine MAVEN version 25.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.9.1 - com.arcadedb:arcadedb-graphql 25.9.1 -...

com.arcadedb:arcadedb-console (24.5.1), com.arcadedb:arcadedb-coverage (24.5.1) +7 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (24.5.1)

com.arcadedb:arcadedb-engine MAVEN version 24.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.5.1 - com.arcadedb:arcadedb-coverage 24.5.1 -...

com.arcadedb:arcadedb-console (21.10.2), com.arcadedb:arcadedb-coverage (21.10.2) +9 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (21.10.2)

com.arcadedb:arcadedb-engine MAVEN version 21.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.10.2 - com.arcadedb:arcadedb-coverage 21.10.2 -...

com.arcadedb:arcadedb-coverage (21.10.1), com.arcadedb:arcadedb-mongodbw (21.10.1) +3 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (21.10.1)

com.arcadedb:arcadedb-server MAVEN version 21.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 21.10.1 - com.arcadedb:arcadedb-mongodbw 21.10.1 -...

com.arcadedb:arcadedb-coverage (21.11.1), com.arcadedb:arcadedb-mongodbw (21.11.1) +3 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (21.11.1)

com.arcadedb:arcadedb-server MAVEN version 21.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 21.11.1 - com.arcadedb:arcadedb-mongodbw 21.11.1 -...

com.arcadedb:arcadedb-graphql (25.8.1), com.arcadedb:arcadedb-gremlin (25.8.1) +5 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (25.8.1)

com.arcadedb:arcadedb-server MAVEN version 25.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 25.8.1 - com.arcadedb:arcadedb-gremlin 25.8.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.6.1), com.arcadedb:arcadedb-graphql (>=26.1.1, <=26.6.1) +10 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (>=26.1.1, <=26.6.1)

com.arcadedb:arcadedb-server MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 - io.github.mdre:adbogm 0.9.0.6 Source cves: CVE-2026-65831 Source advisory: OSV:GHSA-48QW-824M-86PR...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization through the PolyglotQueryEngine scripting path in engine/src/main/java/com/arcadedb/query/polyglot/PolyglotQueryEngine.java and GraalPolyglotEngine.java. An attacker can execute language: "js" commands against PO...

com.arcadedb:arcadedb-coverage (25.3.1), com.arcadedb:arcadedb-graphql (25.3.1) +6 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (25.3.1)

com.arcadedb:arcadedb-server MAVEN version 25.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 25.3.1 - com.arcadedb:arcadedb-graphql 25.3.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.6.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.6.1) +17 more potentially affected by unknown CVE via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.6.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.6.1 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-COMARCADEDB-18601930...

com.arcadedb:arcadedb-graphql (25.12.1), com.arcadedb:arcadedb-gremlin (25.12.1) +7 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (25.12.1)

com.arcadedb:arcadedb-server MAVEN version 25.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 25.12.1 - com.arcadedb:arcadedb-gremlin 25.12.1 -...

com.arcadedb:arcadedb-graphql (22.1.3), com.arcadedb:arcadedb-mongodbw (22.1.3) +3 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (22.1.3)

com.arcadedb:arcadedb-server MAVEN version 22.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 22.1.3 - com.arcadedb:arcadedb-mongodbw 22.1.3 -...

com.arcadedb:arcadedb-graphql (25.10.1), com.arcadedb:arcadedb-gremlin (25.10.1) +6 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (25.10.1)

com.arcadedb:arcadedb-server MAVEN version 25.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 25.10.1 - com.arcadedb:arcadedb-gremlin 25.10.1 -...

com.arcadedb:arcadedb-graphql (25.6.1), com.arcadedb:arcadedb-gremlin (25.6.1) +5 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (25.6.1)

com.arcadedb:arcadedb-server MAVEN version 25.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 25.6.1 - com.arcadedb:arcadedb-gremlin 25.6.1 -...

com.arcadedb:arcadedb-coverage (21.10.2), com.arcadedb:arcadedb-mongodbw (21.10.2) +3 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (21.10.2)

com.arcadedb:arcadedb-server MAVEN version 21.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 21.10.2 - com.arcadedb:arcadedb-mongodbw 21.10.2 -...

com.arcadedb:arcadedb-coverage (25.1.1), com.arcadedb:arcadedb-graphql (25.1.1) +6 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (25.1.1)

com.arcadedb:arcadedb-server MAVEN version 25.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 25.1.1 - com.arcadedb:arcadedb-graphql 25.1.1 -...

com.arcadedb:arcadedb-coverage (24.10.1), com.arcadedb:arcadedb-graphql (24.10.1) +3 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (24.10.1)

com.arcadedb:arcadedb-server MAVEN version 24.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-coverage 24.10.1 - com.arcadedb:arcadedb-graphql 24.10.1 -...

com.arcadedb:arcadedb-graphql (22.2.1), com.arcadedb:arcadedb-mongodbw (22.2.1) +3 more potentially affected by CVE-2026-65831 via com.arcadedb:arcadedb-server (22.2.1)

com.arcadedb:arcadedb-server MAVEN version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-server and may be impacted: - com.arcadedb:arcadedb-graphql 22.2.1 - com.arcadedb:arcadedb-mongodbw 22.2.1 -...