CLEANSTART-2026-XR99875 Security fixes for GHSA-389X-839F-4RHX, GHSA-3P8M-J85Q-PGMJ, GHSA-5JPM-X58V-624V, GHSA-84H7-RJJ3-6JX4, GHSA-FGHV-69VJ-QJ49, GHSA-JQ43-27X9-3V86, GHSA-QQPG-MVQG-649V applied in versions: 0.1.109-r0, 0.1.113-r1

Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, percona-server-mongodb-operator, stakater-reloader, chart-testing, crossplane-provider-aws-cloudwatchlogs, mkcert, aactl, nri-nagios, eksctl, yunikorn-k8shim, podinfo, hydra, kubecolor, spire-server, rancher-machine,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, percona-server-mongodb-operator, stakater-reloader, chart-testing, crossplane-provider-aws-cloudwatchlogs, mkcert, aactl, nri-nagios, eksctl, yunikorn-k8shim, podinfo, hydra, kubecolor, spire-server, rancher-machine,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudformation, percona-server-mongodb-operator, stakater-reloader, chart-testing, crossplane-provider-aws-cloudwatchlogs, mkcert, aactl, nri-nagios, eksctl, yunikorn-k8shim, podinfo, hydra, kubecolor, spire-server, rancher-machine,...

CLEANSTART-2026-SU64392 Cancelling a query (e

Multiple security vulnerabilities affect the k8ssandra-operator-fips package. Cancelling a query e. See references for individual vulnerability details...

CVE-2026-22702 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-597G-3PHW-6986 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

GHSA-597G-3PHW-6986 vulnerabilities

Vulnerabilities for packages: request-1276, py3-cassandra-medusa...

CVE-2026-22702 vulnerabilities

Vulnerabilities for packages: request-1276, py3-cassandra-medusa...

CVE-2020-36939

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

CVE-2020-36939

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

CVE-2020-36939

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

EUVD-2020-30857

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

CVE-2020-36939

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

CVE-2020-36939

CVE-2020-36939 affects Cassandra Web 0.5.0. A directory traversal vulnerability arises from the disabled Rack::Protection module, allowing unauthenticated attackers to read arbitrary files (e.g., /etc/passwd) and potentially exfiltrate sensitive credentials. Affected component: web server handlin...

CVE-2020-36939 Cassandra Web 0.5.0 - Remote File Read

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

CVE-2020-36939 Cassandra Web 0.5.0 - Remote File Read

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

PT-2026-4921

Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal parameters. Attackers can exploit the disabled Rack::Protection module to read sensitive system files like /etc/passwd and retrieve Apache...

Cassandra Web path traversal vulnerability

Cassandra Web is a web interface developed by Bulat Shakirzyanov. Version 0.5.0 of Cassandra Web has a path traversal vulnerability, which arises from improper handling of path traversal parameters, potentially allowing access to arbitrary files...

CVE-2026-1225 vulnerabilities

Vulnerabilities for packages: dependency-track, cassandra, kserve-modelmesh, management-api-for-apache-cassandra-5.0, sonar-scanner-cli, nextflow, apache-nifi-registry, trino, zookeeper, apache-nifi, akhq, sonarqube, cassandra-reaper, keycloak-config-cli...