Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through IMPORT DATABASE in ImportDatabaseStatement, SourceDiscovery, and the import source handlers. An authenticated SQL user can trigger the flaw by supplying an IMPORT DATABASE URL or path that points...

com.arcadedb:arcadedb-console (24.2.1), com.arcadedb:arcadedb-coverage (24.2.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.2.1)

com.arcadedb:arcadedb-engine MAVEN version 24.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.2.1 - com.arcadedb:arcadedb-coverage 24.2.1 -...

com.arcadedb:arcadedb-console (23.3.1), com.arcadedb:arcadedb-coverage (23.3.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.3.1)

com.arcadedb:arcadedb-engine MAVEN version 23.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.3.1 - com.arcadedb:arcadedb-coverage 23.3.1 -...

com.arcadedb:arcadedb-console (23.5.1), com.arcadedb:arcadedb-coverage (23.5.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.5.1)

com.arcadedb:arcadedb-engine MAVEN version 23.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.5.1 - com.arcadedb:arcadedb-coverage 23.5.1 -...

com.arcadedb:arcadedb-console (23.6.1), com.arcadedb:arcadedb-coverage (23.6.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.6.1)

com.arcadedb:arcadedb-engine MAVEN version 23.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.6.1 - com.arcadedb:arcadedb-coverage 23.6.1 -...

com.arcadedb:arcadedb-console (23.7.1), com.arcadedb:arcadedb-coverage (23.7.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.7.1)

com.arcadedb:arcadedb-engine MAVEN version 23.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.7.1 - com.arcadedb:arcadedb-coverage 23.7.1 -...

com.arcadedb:arcadedb-console (23.12.2), com.arcadedb:arcadedb-coverage (23.12.2) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.12.2)

com.arcadedb:arcadedb-engine MAVEN version 23.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.12.2 - com.arcadedb:arcadedb-coverage 23.12.2 -...

com.arcadedb:arcadedb-console (24.6.1), com.arcadedb:arcadedb-coverage (24.6.1) +7 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.6.1)

com.arcadedb:arcadedb-engine MAVEN version 24.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.6.1 - com.arcadedb:arcadedb-coverage 24.6.1 -...

com.arcadedb:arcadedb-console (21.10.2), com.arcadedb:arcadedb-coverage (21.10.2) +9 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (21.10.2)

com.arcadedb:arcadedb-engine MAVEN version 21.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.10.2 - com.arcadedb:arcadedb-coverage 21.10.2 -...

com.arcadedb:arcadedb-console (21.11.1), com.arcadedb:arcadedb-coverage (21.11.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (21.11.1)

com.arcadedb:arcadedb-engine MAVEN version 21.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.11.1 - com.arcadedb:arcadedb-coverage 21.11.1 -...

com.arcadedb:arcadedb-console (22.1.2), com.arcadedb:arcadedb-coverage (22.1.2) +7 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.1.2)

com.arcadedb:arcadedb-engine MAVEN version 22.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.2 - com.arcadedb:arcadedb-coverage 22.1.2 -...

com.arcadedb:arcadedb-console (22.8.1), com.arcadedb:arcadedb-coverage (22.8.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.8.1)

com.arcadedb:arcadedb-engine MAVEN version 22.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.8.1 - com.arcadedb:arcadedb-coverage 22.8.1 -...

com.arcadedb:arcadedb-console (22.11.1), com.arcadedb:arcadedb-coverage (22.11.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.11.1)

com.arcadedb:arcadedb-engine MAVEN version 22.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.11.1 - com.arcadedb:arcadedb-coverage 22.11.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.5.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.5.1) +17 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.5.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 and more Source cves: CVE-2026-54077 Source advisory: OSV:GHSA-8W86-M9H8-HVQG...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.5.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.5.1) +17 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.5.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 and more Source cves: CVE-2026-54077 Source advisory: SNYK:JAVA-COMARCADEDB-18021392...

com.arcadedb:arcadedb-console (24.5.1), com.arcadedb:arcadedb-coverage (24.5.1) +7 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.5.1)

com.arcadedb:arcadedb-engine MAVEN version 24.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.5.1 - com.arcadedb:arcadedb-coverage 24.5.1 -...

com.arcadedb:arcadedb-console (25.1.1), com.arcadedb:arcadedb-coverage (25.1.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.1.1)

com.arcadedb:arcadedb-engine MAVEN version 25.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.1.1 - com.arcadedb:arcadedb-coverage 25.1.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.5.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.5.1) +17 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.5.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 and more Source cves: CVE-2026-54077 Source advisory: GHSA-8W86-M9H8-HVQG...

com.arcadedb:arcadedb-console (21.12.1), com.arcadedb:arcadedb-coverage (21.12.1) +5 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (21.12.1)

com.arcadedb:arcadedb-engine MAVEN version 21.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.12.1 - com.arcadedb:arcadedb-coverage 21.12.1 -...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through IMPORT DATABASE in ImportDatabaseStatement, SourceDiscovery, and the import source handlers. An authenticated SQL user can trigger the flaw by supplying an IMPORT DATABASE URL or path that points...