AZL-66698 CVE-2025-26467 affecting package cassandra 5.0.0-2

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

CVE-2025-26467

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

CVE-2025-26467 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

CVE-2025-26467 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

CVE-2025-26467

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

CVE-2025-26467 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

Apache Cassandra 安全漏洞

Apache Cassandra is a distributed Nosql database from the Apache USA Foundation. A security vulnerability exists in Apache Cassandra versions 3.0.30, 3.11.17, 4.0.16, 4.1.7, and 5.0.2, which stems from an improperly defined privilege that could lead to elevation of privilege...

cassandra-query (>=1.0.1, <=1.0.3), toobatel-bot-lib-js (1.0.0) potentially affected by unknown CVE via blubird (0.0.1-security)

blubird NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on blubird and may be impacted: - cassandra-query =1.0.1, =1.0.3 - toobatel-bot-lib-js 1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-15874...

CVE-2025-53643 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, py3-cassandra-medusa, airflow...

GHSA-9548-QRRJ-X5PJ vulnerabilities

Vulnerabilities for packages: dask-kubernetes, py3-cassandra-medusa, airflow...

CVE-2025-53643 vulnerabilities

Vulnerabilities for packages: request-1276, dask-kubernetes, py3-cassandra-medusa, airflow-core, py3-vllm-cuda-12.4, py3.13-scanner-test-libraries-aiohttp, airflow, apache-beam-python-3.11-sdk, text-generation-inference...

GHSA-9548-QRRJ-X5PJ vulnerabilities

Vulnerabilities for packages: request-1276, dask-kubernetes, py3-cassandra-medusa, airflow-core, py3-vllm-cuda-12.4, py3.13-scanner-test-libraries-aiohttp, airflow, apache-beam-python-3.11-sdk, text-generation-inference...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: confluent-kafka, gradle, logstash, apache-nifi-registry, apicurio-registry, cassandra-reaper, apache-activemq-artemis, nrjmx, airflow, sonar-scanner-cli, apache-tika, celeborn, wildfly, kserve-modelmesh, jenkins-plugin-manager, nextflow, flyway,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: confluent-kafka, gradle, logstash, apache-nifi-registry, apicurio-registry, cassandra-reaper, apache-activemq-artemis, nrjmx, airflow, sonar-scanner-cli, apache-tika, celeborn, wildfly, kserve-modelmesh, jenkins-plugin-manager, nextflow, flyway,...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: logstash, nrjmx, kafka, flyway, management-api-for-apache-cassandra-4.0, apache-hop, apicurio-registry, localstack, confluent-kafka, apache-tika, sonar-scanner-cli, celeborn, solr, akhq, hadoop-client-modules, elasticsearch, cassandra-reaper, sonarqube,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: logstash, nrjmx, kafka, flyway, management-api-for-apache-cassandra-4.0, apache-hop, apicurio-registry, localstack, confluent-kafka, apache-tika, sonar-scanner-cli, celeborn, solr, akhq, hadoop-client-modules, elasticsearch, cassandra-reaper, sonarqube,...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, gradle-stage0, confluent-common-docker, cassandra, spark, scala, druid, tez...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, gradle-stage0, confluent-common-docker, cassandra, spark, scala, druid, tez...

CVE-2025-52999 vulnerabilities

Vulnerabilities for packages: spark, hadoop-client-modules, druid, hadoop-fips, gradle-stage0, confluent-common-docker, localstack, tez, cassandra-fips, celeborn, scala, cassandra, elasticsearch, cassandra-reaper, spark-fips...

GHSA-H46C-H94J-95F3 vulnerabilities

Vulnerabilities for packages: spark, hadoop-client-modules, druid, hadoop-fips, gradle-stage0, confluent-common-docker, localstack, tez, cassandra-fips, celeborn, scala, cassandra, elasticsearch, cassandra-reaper, spark-fips...