com.arcadedb:arcadedb-console (23.7.1), com.arcadedb:arcadedb-coverage (23.7.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.7.1)

com.arcadedb:arcadedb-engine MAVEN version 23.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.7.1 - com.arcadedb:arcadedb-coverage 23.7.1 -...

com.arcadedb:arcadedb-console (23.2.1), com.arcadedb:arcadedb-coverage (23.2.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.2.1)

com.arcadedb:arcadedb-engine MAVEN version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.2.1 - com.arcadedb:arcadedb-coverage 23.2.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.5.1), com.arcadedb:arcadedb-graphql (>=26.1.1, <=26.5.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-server (>=26.1.1, <=26.5.1)

com.arcadedb:arcadedb-server MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 - io.github.mdre:adbogm 0.9.0.6 Source cves: CVE-2026-54077 Source advisory: SNYK:JAVA-COMARCADEDB-18021393...

com.arcadedb:arcadedb-console (24.1.1), com.arcadedb:arcadedb-coverage (24.1.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.1.1)

com.arcadedb:arcadedb-engine MAVEN version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.1.1 - com.arcadedb:arcadedb-coverage 24.1.1 -...

com.arcadedb:arcadedb-console (22.8.1), com.arcadedb:arcadedb-coverage (22.8.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.8.1)

com.arcadedb:arcadedb-engine MAVEN version 22.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.8.1 - com.arcadedb:arcadedb-coverage 22.8.1 -...

com.arcadedb:arcadedb-console (23.4.1), com.arcadedb:arcadedb-coverage (23.4.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.4.1)

com.arcadedb:arcadedb-engine MAVEN version 23.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.4.1 - com.arcadedb:arcadedb-coverage 23.4.1 -...

com.arcadedb:arcadedb-console (23.1.1), com.arcadedb:arcadedb-coverage (23.1.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.1.1)

com.arcadedb:arcadedb-engine MAVEN version 23.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.1.1 - com.arcadedb:arcadedb-coverage 23.1.1 -...

com.arcadedb:arcadedb-console (22.1.3), com.arcadedb:arcadedb-graphql (22.1.3) +7 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.1.3)

com.arcadedb:arcadedb-engine MAVEN version 22.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.3 - com.arcadedb:arcadedb-graphql 22.1.3 -...

com.arcadedb:arcadedb-console (25.5.1), com.arcadedb:arcadedb-graphql (25.5.1) +9 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.5.1)

com.arcadedb:arcadedb-engine MAVEN version 25.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.5.1 - com.arcadedb:arcadedb-graphql 25.5.1 -...

com.arcadedb:arcadedb-console (24.4.1), com.arcadedb:arcadedb-coverage (24.4.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.4.1)

com.arcadedb:arcadedb-engine MAVEN version 24.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.4.1 - com.arcadedb:arcadedb-coverage 24.4.1 -...

com.arcadedb:arcadedb-console (25.8.1), com.arcadedb:arcadedb-graphql (25.8.1) +9 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.8.1)

com.arcadedb:arcadedb-engine MAVEN version 25.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.8.1 - com.arcadedb:arcadedb-graphql 25.8.1 -...

com.arcadedb:arcadedb-console (25.9.1), com.arcadedb:arcadedb-graphql (25.9.1) +12 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.9.1)

com.arcadedb:arcadedb-engine MAVEN version 25.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.9.1 - com.arcadedb:arcadedb-graphql 25.9.1 -...

CVE-2026-46515

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.3, PERMREAD access was sufficient to call fmlistmanagers, fmlistpinsets, fmshowcontext, fmgetmcpconfig, fmbackupstatus, fmwhoscalling, fmrunsavedquery, and fmdiagnosetrunk, exposing AMI manager secrets, outbound dial PIN...

CVE-2026-63397 remorses/genql code injection

remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. The malicious code is injected into the generated schema.ts file and executes when the genql client is bundled and imported...

CVE-2026-63397

CVE-2026-63397 : The NVD/CVE entries describe a vulnerability in remorses/genql prior to version 6.3.4 where an authenticated attacker who can control the GraphQL schema passed to genql can inject arbitrary JavaScript or TypeScript. The injected code is written into the generated schema.ts file a...

CVE-2026-63397 remorses/genql code injection

remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. The malicious code is injected into the generated schema.ts file and executes when the genql client is bundled and imported...

CVE-2026-63397 remorses/genql code injection

remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. The malicious code is injected into the generated schema.ts file and executes when the genql client is bundled and imported...

CVE-2026-63397

remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. The malicious code is injected into the generated schema.ts file and executes when the genql client is bundled and imported...

remorses/genql code injection

RISK EVALUATION remorses/genql before version 6.3.4 allows an authenticated attacker with control of the GraphQL schema that is passed to genql to inject arbitrary JavaScript or TypeScript. The malicious code is injected into the generated schema.ts file and executes when the genql client is...

CVE-2026-46515

CVE-2026-46515 (Frogman) affects Frogman’s headless PBX control via MCP and HTTP API. Before version 1.6.3, a PERM_READ privilege was sufficient to call multiple endpoints (fm_list_managers, fm_list_pinsets, fm_show_context, fm_get_mcp_config, fm_backup_status, fm_whos_calling, fm_run_saved_query...