com.arcadedb:arcadedb-console (22.1.1), com.arcadedb:arcadedb-coverage (22.1.1) +7 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (22.1.1)

com.arcadedb:arcadedb-engine MAVEN version 22.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.1 - com.arcadedb:arcadedb-coverage 22.1.1 -...

com.arcadedb:arcadedb-console (25.11.1), com.arcadedb:arcadedb-graphql (25.11.1) +13 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (25.11.1)

com.arcadedb:arcadedb-engine MAVEN version 25.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.11.1 - com.arcadedb:arcadedb-graphql 25.11.1 -...

com.arcadedb:arcadedb-console (25.12.1), com.arcadedb:arcadedb-graphql (25.12.1) +13 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (25.12.1)

com.arcadedb:arcadedb-engine MAVEN version 25.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.12.1 - com.arcadedb:arcadedb-graphql 25.12.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.7.1) +18 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.7.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.7.1 and more Source cves: CVE-2026-67340 Source advisory: OSV:GHSA-X9F9-R4M8-9XC2...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.7.1) +18 more potentially affected by unknown CVE via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.7.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.7.1 and more Source cves: unknown CVE Source advisory: SNYK:JAVA-COMARCADEDB-18021397...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.7.1) +18 more potentially affected by unknown CVE via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.7.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.7.1 and more Source cves: unknown CVE Source advisory: GHSA-X9F9-R4M8-9XC2...

com.arcadedb:arcadedb-console (21.12.1), com.arcadedb:arcadedb-coverage (21.12.1) +5 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (21.12.1)

com.arcadedb:arcadedb-engine MAVEN version 21.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.12.1 - com.arcadedb:arcadedb-coverage 21.12.1 -...

com.arcadedb:arcadedb-console (22.1.2), com.arcadedb:arcadedb-coverage (22.1.2) +7 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (22.1.2)

com.arcadedb:arcadedb-engine MAVEN version 22.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.2 - com.arcadedb:arcadedb-coverage 22.1.2 -...

com.arcadedb:arcadedb-console (22.2.1), com.arcadedb:arcadedb-graphql (22.2.1) +7 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (22.2.1)

com.arcadedb:arcadedb-engine MAVEN version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.2.1 - com.arcadedb:arcadedb-graphql 22.2.1 -...

com.arcadedb:arcadedb-console (22.9.1), com.arcadedb:arcadedb-coverage (22.9.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (22.9.1)

com.arcadedb:arcadedb-engine MAVEN version 22.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.9.1 - com.arcadedb:arcadedb-coverage 22.9.1 -...

com.arcadedb:arcadedb-console (22.10.1), com.arcadedb:arcadedb-coverage (22.10.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (22.10.1)

com.arcadedb:arcadedb-engine MAVEN version 22.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.10.1 - com.arcadedb:arcadedb-coverage 22.10.1 -...

com.arcadedb:arcadedb-console (23.7.1), com.arcadedb:arcadedb-coverage (23.7.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (23.7.1)

com.arcadedb:arcadedb-engine MAVEN version 23.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.7.1 - com.arcadedb:arcadedb-coverage 23.7.1 -...

com.arcadedb:arcadedb-console (23.12.2), com.arcadedb:arcadedb-coverage (23.12.2) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (23.12.2)

com.arcadedb:arcadedb-engine MAVEN version 23.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.12.2 - com.arcadedb:arcadedb-coverage 23.12.2 -...

com.arcadedb:arcadedb-console (24.10.1), com.arcadedb:arcadedb-coverage (24.10.1) +7 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (24.10.1)

com.arcadedb:arcadedb-engine MAVEN version 24.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.10.1 - com.arcadedb:arcadedb-coverage 24.10.1 -...

com.arcadedb:arcadedb-console (24.11.2), com.arcadedb:arcadedb-coverage (24.11.2) +9 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (24.11.2)

com.arcadedb:arcadedb-engine MAVEN version 24.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.11.2 - com.arcadedb:arcadedb-coverage 24.11.2 -...

com.arcadedb:arcadedb-console (25.8.1), com.arcadedb:arcadedb-graphql (25.8.1) +9 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (25.8.1)

com.arcadedb:arcadedb-engine MAVEN version 25.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.8.1 - com.arcadedb:arcadedb-graphql 25.8.1 -...

com.arcadedb:arcadedb-console (23.6.1), com.arcadedb:arcadedb-coverage (23.6.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (23.6.1)

com.arcadedb:arcadedb-engine MAVEN version 23.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.6.1 - com.arcadedb:arcadedb-coverage 23.6.1 -...

com.arcadedb:arcadedb-console (24.5.1), com.arcadedb:arcadedb-coverage (24.5.1) +7 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (24.5.1)

com.arcadedb:arcadedb-engine MAVEN version 24.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.5.1 - com.arcadedb:arcadedb-coverage 24.5.1 -...

com.arcadedb:arcadedb-console (22.8.1), com.arcadedb:arcadedb-coverage (22.8.1) +8 more potentially affected by CVE-2026-67340 via com.arcadedb:arcadedb-engine (22.8.1)

com.arcadedb:arcadedb-engine MAVEN version 22.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.8.1 - com.arcadedb:arcadedb-coverage 22.8.1 -...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection through the ScriptTriggerExecutor in engine/src/main/java/com/arcadedb/schema/trigger/ScriptTriggerExecutor.java. An attacker can execute OS commands by creating a JavaScript trigger that uses...