Apache Cassandra has sensitive Information Leak in cqlsh

Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via /.cassandra/cqlshhistory local file access. Users are recommended to upgrade to version 4.0.20, which fixes this issue. -- Description:...

CVE-2026-1225 vulnerabilities

Vulnerabilities for packages: apache-nifi, localstack, nextflow, management-api-for-apache-cassandra-4.1, knative-kafka-broker, keycloak-config-cli, apache-nifi-registry, nacos, sonar-scanner-cli, dependency-track, cassandra, akhq, management-api-for-apache-cassandra-5.0,...