com.arcadedb:arcadedb-console (23.5.1), com.arcadedb:arcadedb-coverage (23.5.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.5.1)

com.arcadedb:arcadedb-engine MAVEN version 23.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.5.1 - com.arcadedb:arcadedb-coverage 23.5.1 -...

com.arcadedb:arcadedb-console (23.7.1), com.arcadedb:arcadedb-coverage (23.7.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.7.1)

com.arcadedb:arcadedb-engine MAVEN version 23.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.7.1 - com.arcadedb:arcadedb-coverage 23.7.1 -...

com.arcadedb:arcadedb-console (22.11.1), com.arcadedb:arcadedb-coverage (22.11.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.11.1)

com.arcadedb:arcadedb-engine MAVEN version 22.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.11.1 - com.arcadedb:arcadedb-coverage 22.11.1 -...

com.arcadedb:arcadedb-console (24.1.1), com.arcadedb:arcadedb-coverage (24.1.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.1.1)

com.arcadedb:arcadedb-engine MAVEN version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.1.1 - com.arcadedb:arcadedb-coverage 24.1.1 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.3.2), com.arcadedb:arcadedb-coverage (>=21.9.1-beta, <=25.4.1) +10 more potentially affected by CVE-2026-44221 via com.arcadedb:arcadedb-server (>=21.9.1-beta, <=26.3.2)

com.arcadedb:arcadedb-server MAVEN version =21.9.1-beta, =26.2.1, =21.9.1-beta, =21.12.1, =24.11.1, =25.9.1, =25.1.1, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =21.9.1-beta, =25.11.1, =26.3.2 - io.github.mdre:adbogm 0.9.0.6 Source cves: CVE-2026-44221 Source advisory: MEND:CVE-2026-44221...

Authorization Bypass

com.arcadedb, arcadedb-server is vulnerable to Authorization Bypass. The vulnerability is due to improper initialization of access controls and missing security configuration during database creation, which allows an attacker to bypass database and record-level authorization restrictions...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.3.2), com.arcadedb:arcadedb-coverage (>=21.10.1, <=25.4.1) +10 more potentially affected by CVE-2026-44221 via com.arcadedb:arcadedb-server (>=21.10.1, <=26.3.2)

com.arcadedb:arcadedb-server MAVEN version =21.10.1, =26.2.1, =21.10.1, =21.12.1, =24.11.1, =25.9.1, =25.1.1, =21.10.1, =21.10.1, =21.10.1, =21.10.1, =25.11.1, =26.3.2 - io.github.mdre:adbogm 0.9.0.6 Source cves: CVE-2026-44221 Source advisory: GHSA-FXC7-FM93-6Q77...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization n the ServerSecurityUser.getDatabaseUser and ArcadeDBServer.createDatabase processes. An attacker can gain unauthorized access to read, write, and modify schema and data across databases by exploiting improper...