Threats tagged 'ghsa-v25h-f6ww-7597'

ArcadeDB versions prior to 26.10.2 have an improper authorization vulnerability that allows users whose access has been revoked to continue accessing the database through existing open connections using Postgres, Bolt, MongoDB, or Redis wire protocols. This occurs because the system retains a stale ServerSecurityUser executor, enabling continued read and write operations even after user deletion, grant removal, or password changes.