com.arcadedb:arcadedb-console (24.11.2), com.arcadedb:arcadedb-coverage (24.11.2) +9 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.11.2)

com.arcadedb:arcadedb-engine MAVEN version 24.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.11.2 - com.arcadedb:arcadedb-coverage 24.11.2 -...

com.arcadedb:arcadedb-console (22.2.1), com.arcadedb:arcadedb-graphql (22.2.1) +7 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.2.1)

com.arcadedb:arcadedb-engine MAVEN version 22.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.2.1 - com.arcadedb:arcadedb-graphql 22.2.1 -...

com.arcadedb:arcadedb-console (22.1.1), com.arcadedb:arcadedb-coverage (22.1.1) +7 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.1.1)

com.arcadedb:arcadedb-engine MAVEN version 22.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.1 - com.arcadedb:arcadedb-coverage 22.1.1 -...

com.arcadedb:arcadedb-console (23.12.2), com.arcadedb:arcadedb-coverage (23.12.2) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.12.2)

com.arcadedb:arcadedb-engine MAVEN version 23.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.12.2 - com.arcadedb:arcadedb-coverage 23.12.2 -...

com.arcadedb:arcadedb-console (23.11.1), com.arcadedb:arcadedb-coverage (23.11.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.11.1)

com.arcadedb:arcadedb-engine MAVEN version 23.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.11.1 - com.arcadedb:arcadedb-coverage 23.11.1 -...

com.arcadedb:arcadedb-console (23.7.1), com.arcadedb:arcadedb-coverage (23.7.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.7.1)

com.arcadedb:arcadedb-engine MAVEN version 23.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.7.1 - com.arcadedb:arcadedb-coverage 23.7.1 -...

com.arcadedb:arcadedb-console (23.2.1), com.arcadedb:arcadedb-coverage (23.2.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.2.1)

com.arcadedb:arcadedb-engine MAVEN version 23.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.2.1 - com.arcadedb:arcadedb-coverage 23.2.1 -...

com.arcadedb:arcadedb-console (23.5.1), com.arcadedb:arcadedb-coverage (23.5.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.5.1)

com.arcadedb:arcadedb-engine MAVEN version 23.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.5.1 - com.arcadedb:arcadedb-coverage 23.5.1 -...

com.arcadedb:arcadedb-console (24.1.1), com.arcadedb:arcadedb-coverage (24.1.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (24.1.1)

com.arcadedb:arcadedb-engine MAVEN version 24.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 24.1.1 - com.arcadedb:arcadedb-coverage 24.1.1 -...

com.arcadedb:arcadedb-console (22.8.1), com.arcadedb:arcadedb-coverage (22.8.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.8.1)

com.arcadedb:arcadedb-engine MAVEN version 22.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.8.1 - com.arcadedb:arcadedb-coverage 22.8.1 -...

com.arcadedb:arcadedb-console (22.1.3), com.arcadedb:arcadedb-graphql (22.1.3) +7 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.1.3)

com.arcadedb:arcadedb-engine MAVEN version 22.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.1.3 - com.arcadedb:arcadedb-graphql 22.1.3 -...

com.arcadedb:arcadedb-console (25.7.1), com.arcadedb:arcadedb-graphql (25.7.1) +9 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (25.7.1)

com.arcadedb:arcadedb-engine MAVEN version 25.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 25.7.1 - com.arcadedb:arcadedb-graphql 25.7.1 -...

com.arcadedb:arcadedb-console (23.4.1), com.arcadedb:arcadedb-coverage (23.4.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (23.4.1)

com.arcadedb:arcadedb-engine MAVEN version 23.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 23.4.1 - com.arcadedb:arcadedb-coverage 23.4.1 -...

com.arcadedb:arcadedb-console (21.9.1), com.arcadedb:arcadedb-coverage (21.9.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (21.9.1)

com.arcadedb:arcadedb-engine MAVEN version 21.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 21.9.1 - com.arcadedb:arcadedb-coverage 21.9.1 -...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through IMPORT DATABASE in ImportDatabaseStatement, SourceDiscovery, and the import source handlers. An authenticated SQL user can trigger the flaw by supplying an IMPORT DATABASE URL or path that points...

com.arcadedb:arcadedb-console (22.12.1), com.arcadedb:arcadedb-coverage (22.12.1) +8 more potentially affected by CVE-2026-54077 via com.arcadedb:arcadedb-engine (22.12.1)

com.arcadedb:arcadedb-engine MAVEN version 22.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.arcadedb:arcadedb-engine and may be impacted: - com.arcadedb:arcadedb-console 22.12.1 - com.arcadedb:arcadedb-coverage 22.12.1 -...

USN-8557-1 python-authlib vulnerabilities

Jay Neiva and Mauro Carrillo discovered that Authlib did not properly validate cryptographic keys embedded in JWT headers. An attacker could possibly use this issue to forge trusted tokens, resulting in authentication and authorization bypass. CVE-2026-27962 Jay Neiva and Mauro Carrillo discovere...

CVE-2026-54733

The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...

EUVD-2026-44938

The Microsoft 365 and Microsoft Entra ID Plugins for Moodle provide Office 365 and Azure Active Directory integration for Moodle. Prior to 4.5.6, 5.0.5, and 5.1.1, the Microsoft Office 365 Integration plugin localo365 Teams SSO endpoint ssologin.php base64-decodes a JWT payload and authenticates...

Improper Authentication

go.woodpecker-ci.org/woodpecker/v3 is vulnerable to Improper Authentication. The vulnerability is due to the gRPC layer trusting a client-supplied agentid value instead of the authenticated agent identity after JWT verification, which allows an authenticated attacker to impersonate any other agen...