com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.3), com.arcadedb:arcadedb-console (>=21.9.1-beta, <=26.7.3) +22 more potentially affected by CVE-2026-76223 via com.arcadedb:arcadedb-engine (>=21.9.1-beta, <=26.7.3)

com.arcadedb:arcadedb-engine MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.9.1-beta, =21.12.1, =21.9.1-beta, =25.9.1, =25.9.1, =25.9.1, =26.4.2, =21.9.1-beta, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =26.7.3 and more Source cves: CVE-2026-76223 Source advisory:...

CVE-2026-75853

ArcadeDB's Gremlin wire-protocol plugin com.arcadedb:arcadedb-gremlin in versions = 26.7.3 enforces authentication SASL PLAIN but performs no authorization: it never checks database access permissions canAccessToDatabase and never binds the authenticated principal into the engine. As a result, an...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.7.1), com.arcadedb:arcadedb-graphql (>=26.1.1, <=26.7.1) +11 more potentially affected by CVE-2026-67342 via com.arcadedb:arcadedb-server (>=26.1.1, <=26.7.1)

com.arcadedb:arcadedb-server MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 - com.arcadedb:arcadedb-tracing 26.7.1 - io.github.mdre:adbogm 0.9.0.6 Source cves: CVE-2026-67342 Source advisory: OSV:GHSA-X8MG-6R4P-87P...

com.arcadedb:arcadedb-console (25.7.1), com.arcadedb:arcadedb-graphql (25.7.1) +9 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.7.1)

com.arcadedb:arcadedb-engine MAVEN version 25.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.7.1 - com.arcadedb:arcadedb-graphql 25.7.1 -...

com.arcadedb:arcadedb-console (25.4.1), com.arcadedb:arcadedb-coverage (25.4.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.4.1)

com.arcadedb:arcadedb-engine MAVEN version 25.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.4.1 - com.arcadedb:arcadedb-coverage 25.4.1 -...

com.arcadedb:arcadedb-console (25.3.1), com.arcadedb:arcadedb-coverage (25.3.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.3.1)

com.arcadedb:arcadedb-engine MAVEN version 25.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.3.1 - com.arcadedb:arcadedb-coverage 25.3.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.5.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.5.1) +17 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.5.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 and more Source cves: CVE-2026-54077 Source advisory: GHSA-8W86-M9H8-HVQG...

com.arcadedb:arcadedb-console (25.9.1), com.arcadedb:arcadedb-graphql (25.9.1) +12 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.9.1)

com.arcadedb:arcadedb-engine MAVEN version 25.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.9.1 - com.arcadedb:arcadedb-graphql 25.9.1 -...