CVE-2026-60090

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

CVE-2026-60090 PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

EUVD-2026-43175

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

CVE-2026-60090 PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: airbyte-server-fips, nacos-docker, zookeeper-fips, keycloak-config-cli, dependency-track-apiserver, kafbat-ui-fips, s3proxy, akhq, nextflow, apache-nifi-registry, localstack, apache-nifi, nacos, cassandra-fips, kafbat-ui, knative-kafka-broker,...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: airbyte-server-fips, nacos-docker, zookeeper-fips, keycloak-config-cli, dependency-track-apiserver, kafbat-ui-fips, s3proxy, akhq, nextflow, apache-nifi-registry, localstack, apache-nifi, nacos, cassandra-fips, kafbat-ui, knative-kafka-broker,...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, cassandra, cassandra-reaper, kserve-modelmesh, thingsboard, akhq, management-api-for-apache-cassandra-5.0, nextflow, trino, apache-nifi-registry, zookeeper, apache-nifi, sonar-scanner-cli...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, cassandra, cassandra-reaper, kserve-modelmesh, thingsboard, akhq, management-api-for-apache-cassandra-5.0, nextflow, trino, apache-nifi-registry, zookeeper, apache-nifi, sonar-scanner-cli...

GO-2026-5467 Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation in github.com/authorizerdev/authorizer

Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation in github.com/authorizerdev/authorizer...

CVE-2026-47846

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

CVE-2026-47846

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

CVE-2026-47846

Bitnami Cassandra container images are affected by a retained default superuser vulnerability: when CASSANDRA_USER is customized, the init script creates a new superuser but may not drop the built-in cassandra account, leaving cassandra:cassandra active as an unintended access path. This can allo...

CVE-2026-47846

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

BIT-CASSANDRA-2026-47846 Default superuser cassandra:cassandra left active when CASSANDRA_USER is customized

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

PT-2026-50715

Name of the Vulnerable Software and Affected Versions Bitnami Cassandra container images versions 4.0.x prior to 4.0.20-photon-5-r7 Bitnami Cassandra container images versions 4.1.x prior to 4.1.11-photon-5-r7 Bitnami Cassandra container images versions 5.0.x prior to 5.0.8-photon-5-r4 /...

ROOT-APP-MAVEN-CVE-2026-27314 CVE-2026-27314 in io.root.org.apache.cassandra:cassandra-all - Patched by Root

Root has patched CVE-2026-27314 in the io.root.org.apache.cassandra:cassandra-all package for Root:Maven. Multiple fixed versions available...

CVE-2026-50010 vulnerabilities

Vulnerabilities for packages: kafka, pinot-fips, infinispan, logstash-fips, elasticsearch-fips, kayenta, commercial-elasticsearch, ghidra, celeborn, druid, strimzi-kafka-operator-fips, opensearch, logstash, kafbat-ui, knative-kafka-broker, docker-selenium, request-9047-keycloak-fips, tez,...

GHSA-C653-97M9-RCG9 vulnerabilities

Vulnerabilities for packages: kafka, pinot-fips, infinispan, logstash-fips, elasticsearch-fips, kayenta, commercial-elasticsearch, ghidra, celeborn, druid, strimzi-kafka-operator-fips, opensearch, logstash, kafbat-ui, knative-kafka-broker, docker-selenium, request-9047-keycloak-fips, tez,...

GHSA-C653-97M9-RCG9 vulnerabilities

Vulnerabilities for packages: tez, logstash, cassandra, neo4j, kserve-modelmesh, thingsboard, management-api-for-apache-cassandra-5.0, druid, infinispan, spark, docker-selenium, opensearch, solr, apache-pulsar...

CVE-2026-50010 vulnerabilities

Vulnerabilities for packages: tez, logstash, cassandra, neo4j, kserve-modelmesh, thingsboard, management-api-for-apache-cassandra-5.0, druid, infinispan, spark, docker-selenium, opensearch, solr, apache-pulsar...