CLEANSTART-2026-TX96881 Security fixes for CVE-2024-6763, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-72hv-8253-57qq, ghsa-qh8g-58pp-2wxh, ghsa-qqpg-mvqg-649v applied in versions: 4.0.1-r2

Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IS43446 Security fixes for ghsa-25qh-j22f-pwp8, ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4g8c-wm8x-jfhw, ghsa-5jpm-x58v-624v, ghsa-72hv-8253-57qq, ghsa-84h7-rjj3-6jx4, ghsa-fghv-69vj-qj49, ghsa-jq43-27x9-3v86, ghsa-pwqr-wmgm-9rr8, ghsa-qqpg-mvqg-649v, ghsa-w9fj-cfpg-grvv, ghsa-xq3w-v528-46rv applied in versions: 0.1.109-r0, 0.1.109-r1, 0.1.111-r2

Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: gradle, gradle-stage0, thingsboard, logstash, cassandra-reaper, dependency-track, cassandra, zookeeper, airflow, scala, wavefront-proxy, neo4j, zipkin, solr, spdx-tools-java, jenkins-plugin-manager, kserve-modelmesh, nextflow, infinispan, apicurio-registry, kafka,...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: gradle, localstack, s3proxy, apache-hop, kafka-bridge-fips, kafka-bridge, seata, hadoop-fips, sonarqube, logstash, opensearch-fips, ontop, cassandra-fips, knative-kafka-broker, jenkins-plugin-manager, geoserver, zipkin, flyway-fips, apache-tika-fips, wildfly,...

CLEANSTART-2026-XR99875 Security fixes for GHSA-389X-839F-4RHX, GHSA-3P8M-J85Q-PGMJ, GHSA-5JPM-X58V-624V, GHSA-84H7-RJJ3-6JX4, GHSA-FGHV-69VJ-QJ49, GHSA-JQ43-27X9-3V86, GHSA-QQPG-MVQG-649V applied in versions: 0.1.109-r0, 0.1.113-r1

Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: rancher-system-agent, whereabouts, conftest, protoc-gen-go, crossplane-provider-aws-ec2, chart-testing, ipfs-cluster, azure-workload-identity-webhook, gostatsd, kubernetes-csi-external-resizer, nginx-prometheus-exporter, crossplane-provider-aws-rds, paranoia,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: rancher-system-agent, whereabouts, conftest, protoc-gen-go, crossplane-provider-aws-ec2, chart-testing, ipfs-cluster, azure-workload-identity-webhook, gostatsd, kubernetes-csi-external-resizer, nginx-prometheus-exporter, crossplane-provider-aws-rds, paranoia,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: rancher-system-agent, whereabouts, conftest, protoc-gen-go, crossplane-provider-aws-ec2, chart-testing, ipfs-cluster, azure-workload-identity-webhook, gostatsd, kubernetes-csi-external-resizer, nginx-prometheus-exporter, crossplane-provider-aws-rds, paranoia,...

CLEANSTART-2026-SU64392 Cancelling a query (e

Multiple security vulnerabilities affect the k8ssandra-operator-fips package. Cancelling a query e. See references for individual vulnerability details...

CVE-2026-22702 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-597G-3PHW-6986 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-597G-3PHW-6986 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, request-1276...

CVE-2026-22702 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, request-1276...

CVE-2020-36939

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

CVE-2020-36939

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

CVE-2020-36939

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

CVE-2020-36939

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

CVE-2020-36939

CVE-2020-36939 affects Cassandra Web 0.5.0. A directory traversal vulnerability arises from the disabled Rack::Protection module, allowing unauthenticated attackers to read arbitrary files (e.g., /etc/passwd) and potentially exfiltrate sensitive credentials. Affected component: web server handlin...

EUVD-2020-30857

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

CVE-2020-36939 Cassandra Web 0.5.0 - Remote File Read

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...