github.com/basekick-labs/arc vulnerabilities (Go)

5 vulnerabilities.

• github.com/basekick-labs/arc Go Arc has unauthenticated application log disclosure via `/api/v1/logs` GHSA-m3qr-fvp4-78xj Fix available No scoreNovember 3, 2026
• github.com/basekick-labs/arc Go Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735 CVE-2026-55098 Fix available 6.5 MediumOctober 30, 2026
• github.com/basekick-labs/arc Go Arc: Unauthenticated cluster node admission when `cluster.shared_secret` is unset CVE-2026-55678 Fix available 6.9 MediumAugust 28, 2026
• github.com/basekick-labs/arc Go Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS CVE-2026-48050 Fix available 8.8 HighJune 11, 2026
• github.com/basekick-labs/arc Go Arc has an authenticated arbitrary local-file read via DuckDB I/O functions that bypasses RBAC table-level checks CVE-2026-47735 Fix available 7.1 HighJune 8, 2026