CLEANSTART-2026-XR78310 Security fixes for CVE-2015-2104, CVE-2020-8908, CVE-2021-21295, CVE-2021-21409, CVE-2021-37136, CVE-2022-1471, CVE-2022-41881, CVE-2023-27043, CVE-2023-2976, CVE-2023-34462, CVE-2023-6378, CVE-2024-12254, CVE-2024-12718, CVE-2024-12798, CVE-2024-12801, CVE-2024-6232, CVE-2024-6923, CVE-2024-9287, CVE-2025-0938, CVE-2025-4138, CVE-2025-4330, CVE-2025-4516, CVE-2025-4517, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-3mc7-4q67-w48m, ghsa-5mg8-w23w-74h3, ghsa-6v67-2wr5-gvf4, ghsa-72hv-8253-57qq, ghsa-7g45-4rm6-3mm3, ghsa-98wm-3w3q-mw94, ghsa-9w3m-gqgf-c4p9, ghsa-c4r9-r8fh-9vj2, ghsa-hhhw-99gj-p3c3, ghsa-mjmj-j48q-9wg2, ghsa-pr98-23f8-jwxv, ghsa-qqpg-mvqg-649v, ghsa-vmq6-5m68-f53m, ghsa-w37g-rhq8-7m4j applied in versions: 4.1.10-r1, 4.1.10-r2

🗓️ 01 Apr 2026 09:27:08Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 14 Views

Security fixes for cassandra-fips in versions 4.1.10-r1 and 4.1.10-r2.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multipe vulnerabilities in DITA may affect IBM Business Automation Workflow Case Management docGenerator feature (CVE-2023-2976, CVE-2022-44729, CVE-2022-44730)	12 Dec 202309:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for June 2023	30 Jun 202315:51	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rapid Infrastructure Automation	28 May 202514:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in Google Guava [CVE-2023-2976]	29 Sep 202320:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Scale Transparent Cloud Tiering is affected by a vulnerability which can cause denial of service (CVE-2022-41881)	2 May 202312:17	–	ibm
IBM Security Bulletins	Security Bulletin: Use of Java's default temporary directory for file creation in `FileBackedOutputStream` allows other users and apps to be able to access the files created by the class, which affects IBM watsonx.data	29 Aug 202514:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager April 2023 - Multiple CVEs	22 May 202309:01	–	ibm
IBM Security Bulletins	Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability CVE-2021-37136 in Netty netty-codec	28 Sep 202207:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Spectrum Symphony provides upgraded software packages to address known CVEs	31 Jan 202402:01	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XR78310.json
osv	www.osv.dev/vulnerability/CVE-2015-2104
osv	www.osv.dev/vulnerability/CVE-2020-8908
osv	www.osv.dev/vulnerability/CVE-2021-21295
osv	www.osv.dev/vulnerability/CVE-2021-21409
osv	www.osv.dev/vulnerability/CVE-2021-37136
osv	www.osv.dev/vulnerability/CVE-2022-1471
osv	www.osv.dev/vulnerability/CVE-2022-41881
osv	www.osv.dev/vulnerability/CVE-2023-27043
osv	www.osv.dev/vulnerability/CVE-2023-2976

18 Sep 2026 12:18Current

7.1High risk

Vulners AI Score7.1

CVSS 25

CVSS 3.17.5 - 9.8

CVSS 48.7

EPSS0.99569

SSVC

cassandra-fips security vulnerabilities later releases version 4.1.10-r1 version 4.1.10-r2