Skip to content
OpenAdvisories

Package · Maven

com.arcadedb:arcadedb-engine

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-67341

    ArcadeDB before 26.7.2 Authorization Bypass via SQL DEFINE FUNCTION

    ArcadeDB versions before 26.7.2 fail to enforce scripting authorization checks on the SQL DEFINE FUNCTION statement with LANGUAGE js. Attackers with database access can execute arbitrary JavaScript code by submitting DEFINE FUNCTION statements, bypassing secu…

    ArcadeData arcadedb com.arcadedb:arcadedb-engine Maven