Skip to content
OpenAdvisories

Package · Go

github.com/basekick-labs/arc

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-55098

    Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735

    Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the remediation of `CVE-2026-47735` leaves a cross-database authorization bypass through DuckDB table-valued I/O functions. In `internal/database/s…

    Basekick-Labs arc github.com/basekick-labs/arc Go
  • Medium 6.9
    CVE-2026-55678

    Arc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset

    Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled is true but cluster.shared_secret is not configured. The defaults in…

    Basekick-Labs arc github.com/basekick-labs/arc Go