238 matches found
AZL-82673 CVE-2026-32588 affecting package cassandra 5.0.0-2
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue...
AZL-82676 CVE-2026-27314 affecting package cassandra 5.0.0-2
Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY. Users are...
CVE-2026-32588 Apache Cassandra: Authenticated DoS via ALTER ROLE Password Hashing
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue...
Apache Cassandra 安全漏洞
Apache Cassandra is a distributed NOSQL database developed by the Apache Foundation in the United States. Version 5.0 of Apache Cassandra contains a security vulnerability. This vulnerability stems from improper permission allocation when using MutualTlsAuthenticator in an mTLS environment, which...
PT-2026-30916
Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue...
CLEANSTART-2026-XR99875 Security fixes for GHSA-389X-839F-4RHX, GHSA-3P8M-J85Q-PGMJ, GHSA-5JPM-X58V-624V, GHSA-84H7-RJJ3-6JX4, GHSA-FGHV-69VJ-QJ49, GHSA-JQ43-27X9-3V86, GHSA-QQPG-MVQG-649V applied in versions: 0.1.109-r0, 0.1.113-r1
Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-QQPG-MVQG-649V vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, nextflow, apache-nifi, cassandra, sonarqube, zookeeper, cassandra-reaper, keycloak-config-cli, apache-nifi-registry, kserve-modelmesh, akhq, sonar-scanner-cli, dependency-track, trino...
GHSA-QQPG-MVQG-649V vulnerabilities
Vulnerabilities for packages: zookeeper, cassandra-fips, dependency-track, management-api-for-apache-cassandra-4.0, ranger, kafbat-ui, nextflow, sonar-scanner-cli, sonarqube, trino, apache-nifi, apache-nifi-registry, localstack, management-api-for-apache-cassandra-5.0, kserve-modelmesh, ontop,...
PT-2025-51036
CVE-2025-13923 - CVE-2022-3646: Apache Cassandra Remote Code Execution CVE ID : CVE-2025-13923 Published : Dec. 10, 2025, 11:15 p.m. | 2 hours, 3 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link...
CVE-2025-10702
Improper Control of Generation of Code 'Code Injection' vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JD...
Malicious code in cdc-apache-cassandra (npm)
The package cdc-apache-cassandra was found to contain malicious code...
MAL-2025-48616 Malicious code in cdc-apache-cassandra (npm)
The package cdc-apache-cassandra was found to contain malicious code...
EUVD-2021-0894
Malware in sbrugna...
EUVD-2022-5523
Malicious code in bioql PyPI...
EUVD-2025-0230
Malicious code in bioql PyPI...
EUVD-2022-2477
Malicious code in bioql PyPI...
EUVD-2023-38098
Malicious code in bioql PyPI...
EUVD-2025-0229
Malicious code in bioql PyPI...