CLEANSTART-2026-YG95344 Security fixes in cassandra-reaper-fips 3.8.0-r7

Package cassandra-reaper-fips version 3.8.0-r7 fixes 4 vulnerabilities: ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-44431, CVE-2026-44432...

CLEANSTART-2026-IW72112 Security fixes in management-api-for-apache-cassandra-5.0 0.1.118-r2

Package management-api-for-apache-cassandra-5.0 version 0.1.118-r2 fixes 26 vulnerabilities: CVE-2026-42583, CVE-2026-42579, CVE-2026-33870, CVE-2026-42584, CVE-2026-42587...

CLEANSTART-2026-IW13101 Security fixes in cassandra-reaper-fips 3.7.1-r4

Package cassandra-reaper-fips version 3.7.1-r4 fixes 42 vulnerabilities: CVE-2022-1471, CVE-2022-38752, CVE-2022-41854, CVE-2025-52999, ghsa-72hv-8253-57qq...

GHSA-3G8R-4PFX-JMFH vulnerabilities

Vulnerabilities for packages: seata, hadoop-fips, management-api-for-apache-cassandra-5.0...

CVE-2026-59920 vulnerabilities

Vulnerabilities for packages: seata, hadoop-fips, management-api-for-apache-cassandra-5.0...

CVE-2026-59920 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...

GHSA-3G8R-4PFX-JMFH vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0...

CVE-2026-59901 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, logstash, zipkin, apache-activemq-artemis, celeborn, apicurio-registry, infinispan, zookeeper, druid, management-api-for-apache-cassandra-5.0, neo4j, cloudwatch-exporter, strimzi-kafka-operator, opensearch, akhq, wavefront-proxy, flyway,...

GHSA-558V-64GR-WGG4 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, logstash, zipkin, apache-activemq-artemis, celeborn, apicurio-registry, infinispan, zookeeper, druid, management-api-for-apache-cassandra-5.0, neo4j, cloudwatch-exporter, strimzi-kafka-operator, opensearch, akhq, wavefront-proxy, flyway,...

PYSEC-2026-2897 PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries

Summary PraisonAI exposes optional SQL/CQL-backed knowledge-store implementations that build table and index identifiers from unvalidated name and collection arguments. Applications that pass untrusted collection names into these backends can trigger SQL or CQL injection. Details This issue affec...

CVE-2026-60090

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

EUVD-2026-43175

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

CVE-2026-60090 PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

CVE-2026-60090 PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, localstack, sonarqube, zookeeper, apache-nifi-registry, kafbat-ui, trino, keycloak-config-cli, thingsboard, apache-nifi, dependency-track-apiserver, nextflow, cassandra-reaper, management-api-for-apache-cassandra-4.0, airbyte-server-fips, s3proxy,...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, localstack, sonarqube, zookeeper, apache-nifi-registry, kafbat-ui, trino, keycloak-config-cli, thingsboard, apache-nifi, dependency-track-apiserver, nextflow, cassandra-reaper, management-api-for-apache-cassandra-4.0, airbyte-server-fips, s3proxy,...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, kserve-modelmesh, sonar-scanner-cli, cassandra-reaper, trino, keycloak-config-cli, nextflow, cassandra, sonarqube, akhq, apache-nifi, apache-nifi-registry, zookeeper, thingsboard...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, kserve-modelmesh, sonar-scanner-cli, cassandra-reaper, trino, keycloak-config-cli, nextflow, cassandra, sonarqube, akhq, apache-nifi, apache-nifi-registry, zookeeper, thingsboard...

CLEANSTART-2026-IY44515 Security fixes for CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42578, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42586, CVE-2026-42587, CVE-2026-44248, ghsa-25qh-j22f-pwp8, ghsa-389x-839f-4rhx, ghsa-38f8-5428-x5cv, ghsa-3p8m-j85q-pgmj, ghsa-45q3-82m4-75jr, ghsa-4g8c-wm8x-jfhw, ghsa-57rv-r2g8-2cj3, ghsa-5jpm-x58v-624v, ghsa-84h7-rjj3-6jx4, ghsa-cm33-6792-r9fm, ghsa-f6hv-jmp6-3vwv, ghsa-fghv-69vj-qj49, ghsa-jfg9-48mv-9qgx, ghsa-jq43-27x9-3v86, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-pwqr-wmgm-9rr8, ghsa-qqpg-mvqg-649v, ghsa-rgrr-p7gp-5xj7, ghsa-v8h7-rr48-vmmv, ghsa-w9fj-cfpg-grvv, ghsa-xq3w-v528-46rv, ghsa-xxqh-mfjm-7mv9 applied in versions: 0.1.109-r0, 0.1.113-r1, 0.1.118-r2

Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...

PYSEC-2026-1053 Openstack DBaaS (Trove) Improper Link Resolution Before File Access

The writeconfig function in trove/guestagent/datastore/experimental/mongodb/service.py, resetconfiguration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, writeconfig function in trove/guestagent/datastore/experimental/redis/service.py, writemycnf function in...