Apache Cassandra has sensitive Information Leak in cqlsh

Sensitive Information Leak in cqlsh in Apache Cassandra 4.0 allows access to sensitive information, like passwords, from previously executed cqlsh command via /.cassandra/cqlshhistory local file access. Users are recommended to upgrade to version 4.0.20, which fixes this issue. -- Description:...

CVE-2026-1225 vulnerabilities

Vulnerabilities for packages: keycloak-config-cli, nacos, localstack, cassandra-reaper, sonarqube, zookeeper-fips, ranger, ontop, cassandra, kserve-modelmesh, ontop-fips, cassandra-fips, dependency-track, management-api-for-apache-cassandra-5.0, akhq, management-api-for-apache-cassandra-4.1,...