com.ericsson.bss.cassandra.ecaudit:ecaudit_c4.0 (>=2.9.0, <=3.1.3), com.instaclustr:cassandra-ldap-4.0.7 (1.0.0) +25 more potentially affected by CVE-2026-27315 via org.apache.cassandra:cassandra-all (>=4.0.0, <=4.0.19)

org.apache.cassandra:cassandra-all MAVEN version =4.0.0, =2.9.0, =4.4.0.0, =4.4.0.0, =0.16.0, =1.0.31, =1.0.31, =1.0.64, =4.0.18.0, =4.0.19.0 and more Source cves: CVE-2026-27315 Source advisory: GHSA-FH34-C629-P8XJ...

Privilege Defined With Unsafe Actions

Overview org.apache.cassandra:cassandra-all is a maven plugin for the Apache Cassandra Project. Which, develops a highly scalable second-generation distributed database, bringing together Dynamo's fully distributed design and Bigtable's ColumnFamily-based data model. Affected versions of this...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c5.0 (>=3.1.0, <=3.1.4), com.instaclustr:ic-sstable-tools-5.0.6 (1.0.0) +3 more potentially affected by CVE-2026-32588 via org.apache.cassandra:cassandra-all (>=5.0.0, <=5.0.6)

org.apache.cassandra:cassandra-all MAVEN version =5.0.0, =3.1.0, =5.0.4.0, =5.0.4.0, =3.0.2, =3.0.4 Source cves: CVE-2026-32588 Source advisory: SNYK:JAVA-ORGAPACHECASSANDRA-15954234...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c5.0 (>=3.1.0, <=3.1.4), com.instaclustr:ic-sstable-tools-5.0.6 (1.0.0) +3 more potentially affected by CVE-2026-32588 via org.apache.cassandra:cassandra-all (>=5.0.0, <=5.0.6)

org.apache.cassandra:cassandra-all MAVEN version =5.0.0, =3.1.0, =5.0.4.0, =5.0.4.0, =3.0.2, =3.0.4 Source cves: CVE-2026-32588 Source advisory: OSV:GHSA-QFFM-GF3J-6MVG...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c5.0 (>=3.1.0, <=3.1.4), com.instaclustr:ic-sstable-tools-5.0.6 (1.0.0) +3 more potentially affected by CVE-2026-32588 via org.apache.cassandra:cassandra-all (>=5.0.0, <=5.0.6)

org.apache.cassandra:cassandra-all MAVEN version =5.0.0, =3.1.0, =5.0.4.0, =5.0.4.0, =3.0.2, =3.0.4 Source cves: CVE-2026-32588 Source advisory: GHSA-QFFM-GF3J-6MVG...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c5.0 (>=3.1.0, <=3.1.4), com.instaclustr:ic-sstable-tools-5.0.6 (1.0.0) +3 more potentially affected by CVE-2026-27314 via org.apache.cassandra:cassandra-all (>=5.0.0, <=5.0.6)

org.apache.cassandra:cassandra-all MAVEN version =5.0.0, =3.1.0, =5.0.4.0, =5.0.4.0, =3.0.2, =3.0.4 Source cves: CVE-2026-27314 Source advisory: MEND:CVE-2026-27314...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c5.0 (>=3.1.0, <=3.1.1) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (>=5.0.0, <=5.0.2)

org.apache.cassandra:cassandra-all MAVEN version =5.0.0, =3.1.0, =3.1.1 Source cves: CVE-2025-23015 Source advisory: GHSA-WMCC-9VCH-JMX4...

com.stratio.cassandra:cassandra-lucene-index-plugin (>=2.2.6.0, <=2.2.6.2) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.2.6)

org.apache.cassandra:cassandra-all MAVEN version 2.2.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin =2.2.6.0, =2.2.6.2 Source cves:...

com.stratio.cassandra:cassandra-lucene-index-plugin (>=2.2.7.0, <=2.2.7.1), io.cassandrareaper:cassandra-reaper (>=1.0.2, <=1.1.0) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.2.7)

org.apache.cassandra:cassandra-all MAVEN version 2.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin =2.2.7.0, =1.0.2, =1.1.0 Source cves:...

com.stratio.cassandra:cassandra-lucene-index-plugin (2.1.10.0) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.1.10)

org.apache.cassandra:cassandra-all MAVEN version 2.1.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin 2.1.10.0 Source cves: CVE-2025-23015...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c4.0 (>=2.9.0, <=3.1.0), com.instaclustr:cassandra-ldap-4.0.7 (1.0.0) +23 more potentially affected by CVE-2025-24860 via org.apache.cassandra:cassandra-all (>=4.0.0, <=4.0.13)

org.apache.cassandra:cassandra-all MAVEN version =4.0.0, =2.9.0, =4.4.0.0, =4.4.0.0, =0.16.0, =1.0.31, =1.0.31, =1.0.64, =2.2.0, =2.5.0 and more Source cves: CVE-2025-24860 Source advisory: SNYK:JAVA-ORGAPACHECASSANDRA-8688121...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c5.0 (>=3.1.0, <=3.1.1) potentially affected by CVE-2025-24860 via org.apache.cassandra:cassandra-all (>=5.0.0, <=5.0.2)

org.apache.cassandra:cassandra-all MAVEN version =5.0.0, =3.1.0, =3.1.1 Source cves: CVE-2025-24860 Source advisory: SNYK:JAVA-ORGAPACHECASSANDRA-8688121...

com.github.stephenc.scale7:scale7-pelops (0.913), me.prettyprint:hector-core (>=0.7.0-23, <=0.7.0-28) +5 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (0.7.0)

org.apache.cassandra:cassandra-all MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.github.stephenc.scale7:scale7-pelops 0.913 - me.prettyprint:hector-core =0.7.0-23,...

com.github.jparkie:spark2cassandra_2.10 (2.2.0), com.github.jparkie:spark2cassandra_2.11 (2.2.0) +2 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.2.5)

org.apache.cassandra:cassandra-all MAVEN version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.github.jparkie:spark2cassandra2.10 2.2.0 - com.github.jparkie:spark2cassandra2.11 2.2.0...

com.bazaarvoice.astyanax:astyanax-cassandra (>=3.8.0-bv8, <=3.8.0-bv9), com.bazaarvoice.astyanax:astyanax-contrib (>=3.8.0-bv8, <=3.8.0-bv9) +28 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.2.4)

org.apache.cassandra:cassandra-all MAVEN version 2.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.bazaarvoice.astyanax:astyanax-cassandra =3.8.0-bv8, =3.8.0-bv8, =3.8.0-bv8, =3.8.0-bv8,...

org.cassandraunit:cassandra-unit (>=0.8.0.2.1, <=0.8.0.2.4) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (0.8.2)

org.apache.cassandra:cassandra-all MAVEN version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - org.cassandraunit:cassandra-unit =0.8.0.2.1, =0.8.0.2.4 Source cves: CVE-2025-23015 Source...

com.stratio.cassandra:cassandra-lucene-index-plugin (>=2.1.8.1, <=2.1.8.6), org.apache.atlas:atlas-index-repair-tool (>=2.2.0, <=2.4.0) +2 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.1.8)

org.apache.cassandra:cassandra-all MAVEN version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.stratio.cassandra:cassandra-lucene-index-plugin =2.1.8.1, =2.2.0, =2.2.0, =2.4.0 -...

com.datastax.cassandra:cassandra-driver-core (1.0.0-beta1), com.datastax.cassandra:cassandra-driver-examples-parent (1.0.0-beta1) +13 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (1.2.0)

org.apache.cassandra:cassandra-all MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.datastax.cassandra:cassandra-driver-core 1.0.0-beta1 -...

com.datastax.spark:spark-cassandra-connector-demos_2.10 (>=1.1.0-alpha2, <=1.1.0-beta1), com.datastax.spark:spark-cassandra-connector-embedded_2.10 (>=1.1.0-alpha2, <=1.1.0-beta1) +7 more potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (2.1.0)

org.apache.cassandra:cassandra-all MAVEN version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.cassandra:cassandra-all and may be impacted: - com.datastax.spark:spark-cassandra-connector-demos2.10 =1.1.0-alpha2, =1.1.0-alpha2, =0.80,...

com.ericsson.bss.cassandra.ecaudit:ecaudit_c5.0 (>=3.1.0, <=3.1.1) potentially affected by CVE-2025-23015 via org.apache.cassandra:cassandra-all (>=5.0.0, <=5.0.2)

org.apache.cassandra:cassandra-all MAVEN version =5.0.0, =3.1.0, =3.1.1 Source cves: CVE-2025-23015 Source advisory: OSV:GHSA-WMCC-9VCH-JMX4...