735 matches found
CVE-2026-60090
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...
EUVD-2026-43175
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...
CVE-2026-60090 PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension
PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...
CVE-2026-10532 vulnerabilities
Vulnerabilities for packages: localstack, thingsboard, kserve-modelmesh, sonar-scanner-cli, trino, management-api-for-apache-cassandra-4.0, nextflow, akhq, cassandra, knative-kafka-broker, cassandra-reaper, apache-nifi, airbyte-server-fips, zookeeper, ontop, nacos, keycloak-config-cli, kafbat-ui,...
GHSA-JHQ6-GFMJ-V8FX vulnerabilities
Vulnerabilities for packages: localstack, thingsboard, kserve-modelmesh, sonar-scanner-cli, trino, management-api-for-apache-cassandra-4.0, nextflow, akhq, cassandra, knative-kafka-broker, cassandra-reaper, apache-nifi, airbyte-server-fips, zookeeper, ontop, nacos, keycloak-config-cli, kafbat-ui,...
CVE-2026-10532 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, management-api-for-apache-cassandra-5.0, cassandra, keycloak-config-cli, akhq, nextflow, sonar-scanner-cli, trino, zookeeper, cassandra-reaper, thingsboard, kserve-modelmesh, apache-nifi...
GHSA-JHQ6-GFMJ-V8FX vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, management-api-for-apache-cassandra-5.0, cassandra, keycloak-config-cli, akhq, nextflow, sonar-scanner-cli, trino, zookeeper, cassandra-reaper, thingsboard, kserve-modelmesh, apache-nifi...
GO-2026-5467 Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation in github.com/authorizerdev/authorizer
Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation in github.com/authorizerdev/authorizer...
CVE-2026-47846
Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...
CVE-2026-47846
Bitnami Cassandra container images are affected by a retained default superuser vulnerability: when CASSANDRA_USER is customized, the init script creates a new superuser but may not drop the built-in cassandra account, leaving cassandra:cassandra active as an unintended access path. This can allo...
CVE-2026-47846
Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...
CVE-2026-47846
Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...
BIT-CASSANDRA-2026-47846 Default superuser cassandra:cassandra left active when CASSANDRA_USER is customized
Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...
PT-2026-50715
Name of the Vulnerable Software and Affected Versions Bitnami Cassandra container images versions 4.0.x prior to 4.0.20-photon-5-r7 Bitnami Cassandra container images versions 4.1.x prior to 4.1.11-photon-5-r7 Bitnami Cassandra container images versions 5.0.x prior to 5.0.8-photon-5-r4 /...
ROOT-APP-MAVEN-CVE-2026-27314 CVE-2026-27314 in io.root.org.apache.cassandra:cassandra-all - Patched by Root
Root has patched CVE-2026-27314 in the io.root.org.apache.cassandra:cassandra-all package for Root:Maven. Multiple fixed versions available...
GHSA-C653-97M9-RCG9 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator-fips, elasticsearch, reposilite, kserve-modelmesh, thingsboard, neo4j, logstash-fips, wazuh-indexer, logstash, pinot-fips, spark-kubernetes-operator, apache-pulsar-fips, strimzi-kafka-operator-fips, cassandra, knative-kafka-broker,...
CVE-2026-50010 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator-fips, elasticsearch, reposilite, kserve-modelmesh, thingsboard, neo4j, logstash-fips, wazuh-indexer, logstash, pinot-fips, spark-kubernetes-operator, apache-pulsar-fips, strimzi-kafka-operator-fips, cassandra, knative-kafka-broker,...
CVE-2026-50010 vulnerabilities
Vulnerabilities for packages: apache-pulsar, management-api-for-apache-cassandra-5.0, neo4j, cassandra, druid, logstash, solr, spark, tez, docker-selenium, infinispan, opensearch, thingsboard, kserve-modelmesh...
GHSA-C653-97M9-RCG9 vulnerabilities
Vulnerabilities for packages: apache-pulsar, management-api-for-apache-cassandra-5.0, neo4j, cassandra, druid, logstash, solr, spark, tez, docker-selenium, infinispan, opensearch, thingsboard, kserve-modelmesh...
GHSA-5XRH-QMMQ-W6CH vulnerabilities
Vulnerabilities for packages: pinot-fips, pinot, tez, apache-hop, management-api-for-apache-cassandra-4.1, thingsboard, seata, management-api-for-apache-cassandra-5.0, trino, celeborn, management-api-for-apache-cassandra-4.0, apache-hop-fips...