com.arcadedb:arcadedb-console (24.1.1), com.arcadedb:arcadedb-coverage (24.1.1) +8 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (24.1.1)

com.arcadedb:arcadedb-engine MAVEN version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.1.1 - com.arcadedb:arcadedb-coverage 24.1.1 -...

com.arcadedb:arcadedb-console (24.5.1), com.arcadedb:arcadedb-coverage (24.5.1) +7 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (24.5.1)

com.arcadedb:arcadedb-engine MAVEN version 24.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.5.1 - com.arcadedb:arcadedb-coverage 24.5.1 -...

com.arcadedb:arcadedb-console (25.1.1), com.arcadedb:arcadedb-coverage (25.1.1) +10 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (25.1.1)

com.arcadedb:arcadedb-engine MAVEN version 25.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.1.1 - com.arcadedb:arcadedb-coverage 25.1.1 -...

com.arcadedb:arcadedb-console (25.5.1), com.arcadedb:arcadedb-graphql (25.5.1) +9 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (25.5.1)

com.arcadedb:arcadedb-engine MAVEN version 25.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.5.1 - com.arcadedb:arcadedb-graphql 25.5.1 -...

com.arcadedb:arcadedb-console (25.7.1), com.arcadedb:arcadedb-graphql (25.7.1) +9 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (25.7.1)

com.arcadedb:arcadedb-engine MAVEN version 25.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.7.1 - com.arcadedb:arcadedb-graphql 25.7.1 -...

com.arcadedb:arcadedb-console (21.9.1-beta), com.arcadedb:arcadedb-coverage (21.9.1-beta) +8 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (21.9.1-beta)

com.arcadedb:arcadedb-engine MAVEN version 21.9.1-beta is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.9.1-beta - com.arcadedb:arcadedb-coverage 21.9.1-beta -...

com.arcadedb:arcadedb-console (21.10.1), com.arcadedb:arcadedb-coverage (21.10.1) +8 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (21.10.1)

com.arcadedb:arcadedb-engine MAVEN version 21.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.10.1 - com.arcadedb:arcadedb-coverage 21.10.1 -...

com.arcadedb:arcadedb-console (21.11.1), com.arcadedb:arcadedb-coverage (21.11.1) +8 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (21.11.1)

com.arcadedb:arcadedb-engine MAVEN version 21.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.11.1 - com.arcadedb:arcadedb-coverage 21.11.1 -...

com.arcadedb:arcadedb-console (21.12.1), com.arcadedb:arcadedb-coverage (21.12.1) +5 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (21.12.1)

com.arcadedb:arcadedb-engine MAVEN version 21.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.12.1 - com.arcadedb:arcadedb-coverage 21.12.1 -...

com.arcadedb:arcadedb-console (22.1.1), com.arcadedb:arcadedb-coverage (22.1.1) +7 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (22.1.1)

com.arcadedb:arcadedb-engine MAVEN version 22.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.1 - com.arcadedb:arcadedb-coverage 22.1.1 -...

com.arcadedb:arcadedb-console (22.1.2), com.arcadedb:arcadedb-coverage (22.1.2) +7 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (22.1.2)

com.arcadedb:arcadedb-engine MAVEN version 22.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.2 - com.arcadedb:arcadedb-coverage 22.1.2 -...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.5.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.5.1) +17 more potentially affected by CVE-2026-54076 via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.5.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 and more Source cves: CVE-2026-54076 Source advisory: SNYK:JAVA-COMARCADEDB-18021396...

com.arcadedb:arcadedb-bolt (>=26.2.1, <=26.5.1), com.arcadedb:arcadedb-console (>=26.1.1, <=26.5.1) +17 more potentially affected by CVE-2026-44221 +1 more via com.arcadedb:arcadedb-engine (>=26.1.1, <=26.5.1)

com.arcadedb:arcadedb-engine MAVEN version =26.1.1, =26.2.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.4.2, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.1.1, =26.5.1 and more Source cves: CVE-2026-44221, CVE-2026-54076 Source advisory: OSV:GHSA-VG6X-6PG9-6QWG...

GHSA-VG6X-6PG9-6QWG ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)

Impact The fix for CVE-2026-44221 GHSA-fxc7-fm93-6q77 added an UPDATESCHEMA authorization check to a single schema-mutating method LocalDocumentType.createProperty. The remaining public schema mutators were left unchecked, so an authenticated identity including a read-only API token that lacks th...

com.arcadedb:arcadedb-console (25.9.1), com.arcadedb:arcadedb-graphql (25.9.1) +12 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.9.1)

com.arcadedb:arcadedb-engine MAVEN version 25.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.9.1 - com.arcadedb:arcadedb-graphql 25.9.1 -...

com.arcadedb:arcadedb-console (25.4.1), com.arcadedb:arcadedb-coverage (25.4.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.4.1)

com.arcadedb:arcadedb-engine MAVEN version 25.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.4.1 - com.arcadedb:arcadedb-coverage 25.4.1 -...

com.arcadedb:arcadedb-console (25.3.2), com.arcadedb:arcadedb-coverage (25.3.2) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.3.2)

com.arcadedb:arcadedb-engine MAVEN version 25.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.3.2 - com.arcadedb:arcadedb-coverage 25.3.2 -...

com.arcadedb:arcadedb-console (25.2.1), com.arcadedb:arcadedb-coverage (25.2.1) +10 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.2.1)

com.arcadedb:arcadedb-engine MAVEN version 25.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.2.1 - com.arcadedb:arcadedb-coverage 25.2.1 -...

com.arcadedb:arcadedb-console (24.10.1), com.arcadedb:arcadedb-coverage (24.10.1) +7 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.10.1)

com.arcadedb:arcadedb-engine MAVEN version 24.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.10.1 - com.arcadedb:arcadedb-coverage 24.10.1 -...

com.arcadedb:arcadedb-console (24.6.1), com.arcadedb:arcadedb-coverage (24.6.1) +7 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.6.1)

com.arcadedb:arcadedb-engine MAVEN version 24.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.6.1 - com.arcadedb:arcadedb-coverage 24.6.1 -...