PT-2026-95377

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.9.1 Description The polyglot script sandbox contains an incomplete deny-list within com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED. While java.util.ResourceBundle is listed, the filter uses exact equalit...