com.arcadedb:arcadedb-engine
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| ArcadeDB: Trigger scripts run with java.lang.* allowed, enabling OS command execution (RCE) | com.arcadedb:arcadedb-engine | Maven | High | Fix reported | |
| ArcadeDB: Scripting authorization gate (GHSA-48qw-824m-86pr) bypassed via SQL DEFINE FUNCTION ... LANGUAGE js | com.arcadedb:arcadedb-engine | Maven | High | Fix reported | |
| ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users | com.arcadedb:arcadedb-engine | Maven | High | Fix reported | |
| ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221) | com.arcadedb:arcadedb-engine | Maven | High | Fix reported |