288 matches found
PT-2026-32108
Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-XR99875 Security fixes for GHSA-389X-839F-4RHX, GHSA-3P8M-J85Q-PGMJ, GHSA-5JPM-X58V-624V, GHSA-84H7-RJJ3-6JX4, GHSA-FGHV-69VJ-QJ49, GHSA-JQ43-27X9-3V86, GHSA-QQPG-MVQG-649V applied in versions: 0.1.109-r0, 0.1.113-r1
Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...
PT-2026-21006
Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-QQPG-MVQG-649V vulnerabilities
Vulnerabilities for packages: keycloak-config-cli, sonar-scanner-cli, cassandra, sonarqube, zookeeper, dependency-track, management-api-for-apache-cassandra-5.0, akhq, apache-nifi, kserve-modelmesh, trino, cassandra-reaper, nextflow, apache-nifi-registry...
GHSA-QQPG-MVQG-649V vulnerabilities
Vulnerabilities for packages: nacos-docker, akhq, dependency-track, dependency-track-apiserver, sonarqube, sonar-scanner-cli, cassandra-fips, ranger, kafbat-ui, trino, management-api-for-apache-cassandra-4.1, knative-kafka-broker-fips, cassandra-reaper, ontop, nextflow, zookeeper,...
PT-2025-51036
CVE-2025-13923 - CVE-2022-3646: Apache Cassandra Remote Code Execution CVE ID : CVE-2025-13923 Published : Dec. 10, 2025, 11:15 p.m. | 2 hours, 3 minutes ago Description : Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Severity: 0.0 | NA Visit the link...
CVE-2025-10702
Improper Control of Generation of Code 'Code Injection' vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JD...
MAL-2025-48616 Malicious code in cdc-apache-cassandra (npm)
The package cdc-apache-cassandra was found to contain malicious code...
Malicious code in cdc-apache-cassandra (npm)
The package cdc-apache-cassandra was found to contain malicious code...
EUVD-2021-0894
Malware in sbrugna...
EUVD-2023-38098
Malicious code in bioql PyPI...
EUVD-2022-0769
Malicious code in bioql PyPI...
EUVD-2025-0230
Malicious code in bioql PyPI...
EUVD-2025-0227
Malicious code in bioql PyPI...
EUVD-2025-0229
Malicious code in bioql PyPI...
EUVD-2022-2477
Malicious code in bioql PyPI...
EUVD-2022-5523
Malicious code in bioql PyPI...
EUVD-2024-37145
Malicious code in bioql PyPI...
ROS-20250923-06
A vulnerability in the Apache Cassandra distributed database management system is related to improper privilege handling. Exploitation of the vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information. impact the...
Privilege Defined With Unsafe Actions
org.apache.cassandra, cassandra-all is vulnerable to Privilege Defined With Unsafe Actions. The vulnerability is due to unsafe actions on a system resource, which allow a user with MODIFY permission on all keyspaces to escalate privileges to superuser within an Apache Cassandra cluster...