Known Vulnerabilities for Bolt by Puppet
Listed below are 1 of the newest known vulnerabilities associated with "Bolt" by "Puppet".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114058 json | ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that lets aut... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-114057 json | ArcadeDB from 26.2.1 before 26.10.1 contains a missing authorization vulnerability in the Bolt protocol handler that allows a... | Not Provided | 2026-10-21 | 2026-10-22 |
| CVE-2026-114056 json | ArcadeDB from 26.8.1 before 26.10.1 contains an authorization bypass vulnerability that allows read-only users to modify edge... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-107911 json | A type confusion vulnerability in the _read_flags function (src/commands/cmd_dispatcher.c) in FalkorDB before 4.20.0 allows a... | Not Provided | 2026-10-09 | 2026-10-09 |
| CVE-2026-107910 json | An improper authentication vulnerability in the is_authenticated function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 all... | Not Provided | 2026-10-09 | 2026-10-15 |
| CVE-2026-107909 json | A heap-based out-of-bounds write in the ws_read_frame function (src/bolt/ws.c) and the buffer_apply_mask function (src/bolt/b... | Not Provided | 2026-10-09 | 2026-10-15 |
| CVE-2026-107908 json | A heap-based out-of-bounds write in the BoltReadHandler function (src/bolt/bolt_api.c) in FalkorDB before 4.20.0 allows a rem... | Not Provided | 2026-10-09 | 2026-10-15 |
| CVE-2026-93594 json | ArcadeDB (Maven artifact com.arcadedb:arcadedb-engine) through 26.8.1 enforces its per-type/per-record access-control rules o... | Not Provided | 2026-09-18 | 2026-09-18 |
| CVE-2026-71291 json | Bolt CMS renders content field values through Twig's full application-level Environment with no SandboxExtension registered a... | Not Provided | 2026-08-05 | 2026-08-10 |
| CVE-2026-14587 json | Neo4j's Bolt modern handshake decoder treats an overlong capability bit mask the same way it treats a truncated bit mask. Whe... | Not Provided | 2026-08-05 | 2026-08-05 |