Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CLEANSTART-2026-XR78310 Security fixes for CVE-2015-2104, CVE-2020-8908, CVE-2021-21295, CVE-2021-21409, CVE-2021-37136, CVE-2022-1471, CVE-2022-41881, CVE-2023-27043, CVE-2023-2976, CVE-2023-34462, CVE-2023-6378, CVE-2024-12254, CVE-2024-12718, CVE-2024-12798, CVE-2024-12801, CVE-2024-6232, CVE-2024-6923, CVE-2024-9287, CVE-2025-0938, CVE-2025-4138, CVE-2025-4330, CVE-2025-4516, CVE-2025-4517, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-3mc7-4q67-w48m, ghsa-5mg8-w23w-74h3, ghsa-6v67-2wr5-gvf4, ghsa-72hv-8253-57qq, ghsa-7g45-4rm6-3mm3, ghsa-98wm-3w3q-mw94, ghsa-9w3m-gqgf-c4p9, ghsa-c4r9-r8fh-9vj2, ghsa-hhhw-99gj-p3c3, ghsa-mjmj-j48q-9wg2, ghsa-pr98-23f8-jwxv, ghsa-qqpg-mvqg-649v, ghsa-vmq6-5m68-f53m, ghsa-w37g-rhq8-7m4j applied in versions: 4.1.10-r1, 4.1.10-r2

🗓️ 01 Apr 2026 09:27:08Reported by GoogleType 
osv
 osv🔗 osv.dev👁 3 Views

Security fixes for cassandra-fips in versions 4.1.10-r1 and 4.1.10-r2.

Related
Refs
ReporterTitlePublishedViews
Family
0day.today		PyTorch Model Server Registration / Deserialization Remote Code Execution Exploit
15 Oct 202300:00
–zdt
Vulnrichment		CVE-2024-12718 Bypass extraction filter to modify file metadata outside extraction directory
3 Jun 202512:59
–vulnrichment
Vulnrichment		CVE-2024-12798 JaninoEventEvaluator vulnerability
19 Dec 202415:14
–vulnrichment
Vulnrichment		CVE-2024-12801 SaxEventRecorder vulnerable to Server-Side Request Forgery (SSRF) attacks
19 Dec 202416:11
–vulnrichment
Vulnrichment		CVE-2024-6232 Regular-expression DoS when parsing TarFile headers
3 Sep 202412:29
–vulnrichment
Vulnrichment		CVE-2024-6923 Email header injection due to unquoted newlines
1 Aug 202413:40
–vulnrichment
Vulnrichment		CVE-2024-9287 Virtual environment (venv) activation scripts don't quote paths
22 Oct 202416:34
–vulnrichment
Vulnrichment		CVE-2025-0938 URL parser allowed square brackets in domain names
31 Jan 202517:51
–vulnrichment
Vulnrichment		CVE-2025-4138 Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory
3 Jun 202512:59
–vulnrichment
Vulnrichment		CVE-2025-4330 Extraction filter bypass for linking outside extraction directory
3 Jun 202512:58
–vulnrichment
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
23 Jun 2026 05:15Current
6.6Medium risk
Vulners AI Score6.6
CVSS 25
CVSS 3.19.4 - 9.8
CVSS 48.7
EPSS0.99569
SSVC
cassandra-fipssecurity vulnerabilitieslater releasesversion 4.1.10-r1version 4.1.10-r2
3