Apache Cassandra has sensitive Information Leak in cqlsh

Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via /.cassandra/cqlshhistory local file access. Users are recommended to upgrade to version 4.0.20, which fixes this issue. -- Description:...

CVE-2026-1225 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, ontop-fips, cassandra-fips, dependency-track-apiserver, management-api-for-apache-cassandra-4.0, ontop, apache-nifi-registry, kserve-modelmesh, management-api-for-apache-cassandra-4.1, nacos-docker, sonar-scanner-cli, cassandra, nextflow, apache-nif...