ArcadeDB: Scripting authorization gate (GHSA-48qw-824m-86pr) bypassed via SQL DEFINE FUNCTION ... LANGUAGE js

The GHSA-48qw-824m-86pr hardening added a checkPermissionsOnDatabaseUPDATESECURITY gate on the polyglot engine PolyglotQueryEngine.java:112-114,126,176,199, but only there. The SQL route to JavaScript never touches it: DefineFunctionStatement.executeSimple DefineFunctionStatement.java:37-100,...

com.arcadedb:arcadedb-console (25.8.1), com.arcadedb:arcadedb-graphql (25.8.1) +9 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.8.1)

com.arcadedb:arcadedb-engine MAVEN version 25.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.8.1 - com.arcadedb:arcadedb-graphql 25.8.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.7.1) +18 more potentially affected by unknown CVE via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.7.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.7.1 and more Source cves: unknown CVE Source advisory: GHSA-VWJC-V7X7-CM6G...

com.arcadedb:arcadedb-console (25.11.1), com.arcadedb:arcadedb-graphql (25.11.1) +13 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.11.1)

com.arcadedb:arcadedb-engine MAVEN version 25.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.11.1 - com.arcadedb:arcadedb-graphql 25.11.1 -...

com.arcadedb:arcadedb-console (25.12.1), com.arcadedb:arcadedb-graphql (25.12.1) +13 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (25.12.1)

com.arcadedb:arcadedb-engine MAVEN version 25.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.12.1 - com.arcadedb:arcadedb-graphql 25.12.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.7.1) +18 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.7.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.7.1 and more Source cves: CVE-2026-67341 Source advisory: OSV:GHSA-VWJC-V7X7-CM6G...

com.arcadedb:arcadedb-console (22.8.1), com.arcadedb:arcadedb-coverage (22.8.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.8.1)

com.arcadedb:arcadedb-engine MAVEN version 22.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.8.1 - com.arcadedb:arcadedb-coverage 22.8.1 -...

com.arcadedb:arcadedb-console (22.9.1), com.arcadedb:arcadedb-coverage (22.9.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.9.1)

com.arcadedb:arcadedb-engine MAVEN version 22.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.9.1 - com.arcadedb:arcadedb-coverage 22.9.1 -...

com.arcadedb:arcadedb-console (22.10.1), com.arcadedb:arcadedb-coverage (22.10.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.10.1)

com.arcadedb:arcadedb-engine MAVEN version 22.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.10.1 - com.arcadedb:arcadedb-coverage 22.10.1 -...

com.arcadedb:arcadedb-console (22.11.1), com.arcadedb:arcadedb-coverage (22.11.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.11.1)

com.arcadedb:arcadedb-engine MAVEN version 22.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.11.1 - com.arcadedb:arcadedb-coverage 22.11.1 -...

com.arcadedb:arcadedb-console (22.12.1), com.arcadedb:arcadedb-coverage (22.12.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (22.12.1)

com.arcadedb:arcadedb-engine MAVEN version 22.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.12.1 - com.arcadedb:arcadedb-coverage 22.12.1 -...

com.arcadedb:arcadedb-console (23.1.1), com.arcadedb:arcadedb-coverage (23.1.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.1.1)

com.arcadedb:arcadedb-engine MAVEN version 23.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.1.1 - com.arcadedb:arcadedb-coverage 23.1.1 -...

com.arcadedb:arcadedb-console (23.1.2), com.arcadedb:arcadedb-coverage (23.1.2) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.1.2)

com.arcadedb:arcadedb-engine MAVEN version 23.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.1.2 - com.arcadedb:arcadedb-coverage 23.1.2 -...

com.arcadedb:arcadedb-console (23.3.1), com.arcadedb:arcadedb-coverage (23.3.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.3.1)

com.arcadedb:arcadedb-engine MAVEN version 23.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.3.1 - com.arcadedb:arcadedb-coverage 23.3.1 -...

com.arcadedb:arcadedb-console (23.4.1), com.arcadedb:arcadedb-coverage (23.4.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.4.1)

com.arcadedb:arcadedb-engine MAVEN version 23.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.4.1 - com.arcadedb:arcadedb-coverage 23.4.1 -...

com.arcadedb:arcadedb-console (23.2.1), com.arcadedb:arcadedb-coverage (23.2.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.2.1)

com.arcadedb:arcadedb-engine MAVEN version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.2.1 - com.arcadedb:arcadedb-coverage 23.2.1 -...

com.arcadedb:arcadedb-console (23.5.1), com.arcadedb:arcadedb-coverage (23.5.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.5.1)

com.arcadedb:arcadedb-engine MAVEN version 23.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.5.1 - com.arcadedb:arcadedb-coverage 23.5.1 -...

com.arcadedb:arcadedb-console (23.6.1), com.arcadedb:arcadedb-coverage (23.6.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.6.1)

com.arcadedb:arcadedb-engine MAVEN version 23.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.6.1 - com.arcadedb:arcadedb-coverage 23.6.1 -...

com.arcadedb:arcadedb-console (23.7.1), com.arcadedb:arcadedb-coverage (23.7.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.7.1)

com.arcadedb:arcadedb-engine MAVEN version 23.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.7.1 - com.arcadedb:arcadedb-coverage 23.7.1 -...

com.arcadedb:arcadedb-console (23.9.1), com.arcadedb:arcadedb-coverage (23.9.1) +8 more potentially affected by CVE-2026-67341 via com.arcadedb:arcadedb-engine (23.9.1)

com.arcadedb:arcadedb-engine MAVEN version 23.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.9.1 - com.arcadedb:arcadedb-coverage 23.9.1 -...