Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.arcadedb:arcadedb-server

3 known vulnerabilities (2 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
26.11.1 (Nov 4, 2026): no advisory affects it
Newest unaffected release
26.11.1 (Nov 4, 2026), the latest release
Advisories
3 · 2 critical, 1 high
Dependents
12
Releases
65 since 21.9.1 (Sep 21, 2021)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 3

  • ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read

    Affected: fixed in 26.7.1.

    Fixed in 26.7.1 (released Jul 1, 2026, 76 days before disclosure).

    The latest release, 26.11.1, is not affected.

  • CVE-2026-67342Critical 9.3

    ArcadeDB before 26.7.2 Authorization Bypass via Database Handlers

    Affected: fixed in 26.7.2.

    Fixed in 26.7.2 (released Jul 9, 2026, 23 days before disclosure).

    The latest release, 26.11.1, is not affected.

  • CVE-2026-44221Critical 9.0

    ArcadeDB: Cross-database authorization bypass and unsecured newly-created databases

    Affected: from 21.10.1, fixed in 26.4.2.

    Fixed in 26.4.2 (released Apr 24, 2026, 18 days before disclosure).

    The latest release, 26.11.1, is not affected.