Arc has unauthenticated application log disclosure via `/api/v1/logs` in github.com/basekick-labs/arc

Mô tả

Tham khảo

• Basekick-Labs/arc security advisory · ADVISORY
• Basekick-Labs/arc commit bb7d976 · FIX
• Basekick-Labs/arc#506 · WEB
• Basekick-Labs/arc release v26.06.2 · WEB

Lỗ hổng khác của github.com/basekick-labs/arc

• GHSA-m3qr-fvp4-78xjTHẤPArc has unauthenticated application log disclosure via `/api/v1/logs`
• CVE-2026-55098TRUNG BÌNH 6.5Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the remediation of `CVE-2026…
• CVE-2026-55678TRUNG BÌNH 6.9Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join re…
• CVE-2026-48050CAO 8.8Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's `net/http/pprof` handlers at `/debug/…
• CVE-2026-47735CAO 7.1Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator (`internal/api/query.go:Va…