com.arcadedb:arcadedb-console (21.10.1), com.arcadedb:arcadedb-coverage (21.10.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (21.10.1)

com.arcadedb:arcadedb-engine MAVEN version 21.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.10.1 - com.arcadedb:arcadedb-coverage 21.10.1 -...

com.arcadedb:arcadedb-console (25.4.1), com.arcadedb:arcadedb-coverage (25.4.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.4.1)

com.arcadedb:arcadedb-engine MAVEN version 25.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.4.1 - com.arcadedb:arcadedb-coverage 25.4.1 -...

com.arcadedb:arcadedb-console (23.2.1), com.arcadedb:arcadedb-coverage (23.2.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.2.1)

com.arcadedb:arcadedb-engine MAVEN version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.2.1 - com.arcadedb:arcadedb-coverage 23.2.1 -...

com.arcadedb:arcadedb-console (24.1.1), com.arcadedb:arcadedb-coverage (24.1.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.1.1)

com.arcadedb:arcadedb-engine MAVEN version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.1.1 - com.arcadedb:arcadedb-coverage 24.1.1 -...

com.arcadedb:arcadedb-console (23.9.1), com.arcadedb:arcadedb-coverage (23.9.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.9.1)

com.arcadedb:arcadedb-engine MAVEN version 23.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.9.1 - com.arcadedb:arcadedb-coverage 23.9.1 -...

com.arcadedb:arcadedb-console (22.9.1), com.arcadedb:arcadedb-coverage (22.9.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.9.1)

com.arcadedb:arcadedb-engine MAVEN version 22.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.9.1 - com.arcadedb:arcadedb-coverage 22.9.1 -...

com.arcadedb:arcadedb-console (25.12.1), com.arcadedb:arcadedb-graphql (25.12.1) +13 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.12.1)

com.arcadedb:arcadedb-engine MAVEN version 25.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.12.1 - com.arcadedb:arcadedb-graphql 25.12.1 -...

com.arcadedb:arcadedb-console (23.1.2), com.arcadedb:arcadedb-coverage (23.1.2) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.1.2)

com.arcadedb:arcadedb-engine MAVEN version 23.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.1.2 - com.arcadedb:arcadedb-coverage 23.1.2 -...

com.arcadedb:arcadedb-console (23.11.1), com.arcadedb:arcadedb-coverage (23.11.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.11.1)

com.arcadedb:arcadedb-engine MAVEN version 23.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.11.1 - com.arcadedb:arcadedb-coverage 23.11.1 -...

com.arcadedb:arcadedb-console (23.10.1), com.arcadedb:arcadedb-coverage (23.10.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.10.1)

com.arcadedb:arcadedb-engine MAVEN version 23.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.10.1 - com.arcadedb:arcadedb-coverage 23.10.1 -...

Important: Red Hat Security Advisory: multicluster engine for Kubernetes v2.6.12 security update

The multicluster engine for Kubernetes 2.6 General Availability release images, which add new features and enhancements, bug fixes, and updated container images. The multicluster engine for Kubernetes v2.6 images The multicluster engine for Kubernetes provides the foundational components that are...

CVE-2026-45367

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.7, the FHIRPathEngine implementation passes user-controlled regular expressions from matches, matchesFull, and replaceMatches to Java regex operations without effective timeouts,...

EUVD-2026-44983

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.7, the FHIRPathEngine implementation passes user-controlled regular expressions from matches, matchesFull, and replaceMatches to Java regex operations without effective timeouts,...

CVE-2026-45367

HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java. Prior to 6.9.7, the FHIRPathEngine implementation passes user-controlled regular expressions from matches, matchesFull, and replaceMatches to Java regex operations without effective timeouts,...

CVE-2026-46621 Yamcs: Authenticated Remote Code Execution (RCE) via Jython Algorithm Code Injection

Yamcs is a mission control framework. Prior to 5.12.7, the Yamcs script evaluation engine for Python algorithms dynamically compiled and evaluated user-controlled algorithm text using Jython through the JSR-223 ScriptEngine API without enforcing a secure sandbox, so an authenticated user with the...

CVE-2026-46562 Yamcs: Remote Code Execution via Mission Database algorithm override

Yamcs is a mission control framework. Prior to 5.12.7, the Nashorn ScriptEngine used to evaluate user-supplied JavaScript algorithm text in yamcs-core/src/main/java/org/yamcs/algorithms/ScriptAlgorithmExecutorFactory.java was constructed without a ClassFilter, so a user with the...

CVE-2026-44632 Yamcs: Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`

Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory, which dynamically compiled and evaluated user-controlled algorithm text through the Janino...

CVE-2026-44632 Yamcs: Server-Side Code Injection (RCE) via Janino Expression Engine in `JavaExprAlgorithmExecutionFactory`

Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory, which dynamically compiled and evaluated user-controlled algorithm text through the Janino...

CVE-2026-44632

Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory, which dynamically compiled and evaluated user-controlled algorithm text through the Janino...

EUVD-2026-44957

Yamcs is a mission control framework. Prior to 5.12.7, a server-side code injection vulnerability existed in the Yamcs algorithm evaluation engine org.yamcs.algorithms.JavaExprAlgorithmExecutionFactory, which dynamically compiled and evaluated user-controlled algorithm text through the Janino...