github.com/basekick-labs/arc vulnerabilities
CVEs whose affected-version data names the github.com/basekick-labs/arc package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-55678MediumArc is an open, SQL-native time-series database for telemetry
Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join requests without authentication when cluster.enabled is true but cluster.shared_secret is not confi…
▾ Sunlitbasekick-labs · github.com/basekick-labs/arcEPSS 0.39%via NVD
CVE-2026-47735HighArc is an open, SQL-native time-series database for telemetry
Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator (`internal/api/query.go:ValidateSQLRequest`) blocked only `read_parquet(` and `arc_partition_agg(` via regex denylist. The …
▾ Twilightbasekick-labs · github.com/basekick-labs/arcEPSS 0.29%via NVD