Arc has unauthenticated application log disclosure via `/api/v1/logs` in github.com/basekick-labs/arc

Description

References

• Basekick-Labs/arc security advisory · ADVISORY
• Basekick-Labs/arc commit bb7d976 · FIX
• Basekick-Labs/arc#506 · WEB
• Basekick-Labs/arc release v26.06.2 · WEB

github.com/basekick-labs/arc 的其他漏洞

• GHSA-m3qr-fvp4-78xj低危Arc has unauthenticated application log disclosure via `/api/v1/logs`
• CVE-2026-55098中危 6.5Arc is an open, SQL-native time-series database for telemetry. Prior to the repository-verified 26.06.2 repair, the remediation of `CVE-2026…
• CVE-2026-55678中危 6.9Arc is an open, SQL-native time-series database for telemetry. From 26.02.1 until 26.06.2, Arc Enterprise clustering accepts cluster join re…
• CVE-2026-48050高危 8.8Arc is an open, SQL-native time-series database for telemetry. Versions prior to 26.06.1 register Go's `net/http/pprof` handlers at `/debug/…
• CVE-2026-47735高危 7.1Arc is an open, SQL-native time-series database for telemetry. Prior to version 26.06.1, Arc's user-SQL validator (`internal/api/query.go:Va…