{"action":"Upgrade com.arcadedb:arcadedb-engine to 26.6.1 or later.","affected":[{"fixed":"26.6.1","introduced":"0"}],"component":"com.arcadedb:arcadedb-engine","cve_ids":["CVE-2026-54076"],"ecosystem":"Maven","epss":0.00504,"exploited":false,"fixed_versions":["26.6.1"],"ghsa_id":"GHSA-vg6x-6pg9-6qwg","id":"tcs_01M5N9E1H51YMK3SXHWRHCKDF3","modified_at":"2026-07-16T20:26:43.971264Z","published_at":"2026-07-16T20:08:24Z","references":["https://osv.dev/vulnerability/GHSA-vg6x-6pg9-6qwg","https://github.com/ArcadeData/arcadedb/security/advisories/GHSA-vg6x-6pg9-6qwg","https://github.com/ArcadeData/arcadedb","https://github.com/ArcadeData/arcadedb/releases/tag/26.6.1"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-vg6x-6pg9-6qwg","url":"https://osv.dev/vulnerability/GHSA-vg6x-6pg9-6qwg"}],"summary":"ArcadeDB: Read-only users can mutate database schema (incomplete fix of CVE-2026-44221)"}