GHSA-QQPG-MVQG-649V vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, akhq, management-api-for-apache-cassandra-4.0, knative-kafka-broker-fips, kafbat-ui, sonarqube, zookeeper-fips, apache-nifi, management-api-for-apache-cassandra-5.0, cassandra, keycloak-config-cli, kserve-modelmesh, ontop-fips, nacos, zookeeper,...

PT-2025-51036

CVE-2025-13923 - CVE-2022-3646: Apache Cassandra Remote Code Execution CVE ID : CVE-2025-13923 Published : Dec. 10, 2025, 11:15 p.m. | 2 hours, 3 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link...

CVE-2025-10702

Improper Control of Generation of Code 'Code Injection' vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JD...

Malicious code in cdc-apache-cassandra (npm)

The package cdc-apache-cassandra was found to contain malicious code...

MAL-2025-48616 Malicious code in cdc-apache-cassandra (npm)

The package cdc-apache-cassandra was found to contain malicious code...

EUVD-2021-0894

Malware in sbrugna...

EUVD-2022-5523

Malicious code in bioql PyPI...

EUVD-2023-38098

Malicious code in bioql PyPI...

EUVD-2025-0229

Malicious code in bioql PyPI...

EUVD-2025-0230

Malicious code in bioql PyPI...

EUVD-2022-2477

Malicious code in bioql PyPI...

EUVD-2025-0227

Malicious code in bioql PyPI...

EUVD-2022-0769

Malicious code in bioql PyPI...

EUVD-2024-37145

Malicious code in bioql PyPI...

ROS-20250923-06

A vulnerability in the Apache Cassandra distributed database management system is related to improper privilege handling. Exploitation of the vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information. impact the...

Privilege Defined With Unsafe Actions

org.apache.cassandra, cassandra-all is vulnerable to Privilege Defined With Unsafe Actions. The vulnerability is due to unsafe actions on a system resource, which allow a user with MODIFY permission on all keyspaces to escalate privileges to superuser within an Apache Cassandra cluster...

AZL-66698 CVE-2025-26467 affecting package cassandra 5.0.0-2

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

CVE-2025-26467

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

CVE-2025-26467 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...

CVE-2025-26467 Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

Privilege Defined With Unsafe Actions vulnerability in Apache Cassandra. An user with MODIFY permission ON ALL KEYSPACES can escalate privileges to superuser within a targeted Cassandra cluster via unsafe actions to a system resource. Operators granting data MODIFY permission on all keyspaces on...