CVE-2026-60090

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

EUVD-2026-43175

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

CVE-2026-60090 PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

CVE-2026-60090 PraisonAI before 4.6.78 SQL/CQL Injection via vector dimension

PraisonAI before 4.6.78 fails to validate the caller-controlled dimension argument in the PGVector and Cassandra knowledge-store createcollection backends. Although schema, keyspace, and collection-name identifiers are validated, the dimension value declared as int but not enforced at runtime is...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: cassandra, trino, apache-nifi-registry, localstack, thingsboard, cassandra-reaper, management-api-for-apache-cassandra-4.1, zookeeper-fips, kafbat-ui-fips, knative-kafka-broker-fips, dependency-track-apiserver, management-api-for-apache-cassandra-5.0, kafbat-ui,...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: cassandra, trino, apache-nifi-registry, localstack, thingsboard, cassandra-reaper, management-api-for-apache-cassandra-4.1, zookeeper-fips, kafbat-ui-fips, knative-kafka-broker-fips, dependency-track-apiserver, management-api-for-apache-cassandra-5.0, kafbat-ui,...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: trino, management-api-for-apache-cassandra-5.0, akhq, sonarqube, apache-nifi-registry, nextflow, thingsboard, apache-nifi, sonar-scanner-cli, cassandra, keycloak-config-cli, kserve-modelmesh, cassandra-reaper, zookeeper...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: trino, management-api-for-apache-cassandra-5.0, akhq, sonarqube, apache-nifi-registry, nextflow, thingsboard, apache-nifi, sonar-scanner-cli, cassandra, keycloak-config-cli, kserve-modelmesh, cassandra-reaper, zookeeper...

CLEANSTART-2026-IY44515 Security fixes for CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42578, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42586, CVE-2026-42587, CVE-2026-44248, ghsa-25qh-j22f-pwp8, ghsa-389x-839f-4rhx, ghsa-38f8-5428-x5cv, ghsa-3p8m-j85q-pgmj, ghsa-45q3-82m4-75jr, ghsa-4g8c-wm8x-jfhw, ghsa-57rv-r2g8-2cj3, ghsa-5jpm-x58v-624v, ghsa-84h7-rjj3-6jx4, ghsa-cm33-6792-r9fm, ghsa-f6hv-jmp6-3vwv, ghsa-fghv-69vj-qj49, ghsa-jfg9-48mv-9qgx, ghsa-jq43-27x9-3v86, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-pwqr-wmgm-9rr8, ghsa-qqpg-mvqg-649v, ghsa-rgrr-p7gp-5xj7, ghsa-v8h7-rr48-vmmv, ghsa-w9fj-cfpg-grvv, ghsa-xq3w-v528-46rv, ghsa-xxqh-mfjm-7mv9 applied in versions: 0.1.109-r0, 0.1.113-r1, 0.1.118-r2

Multiple security vulnerabilities affect the management-api-for-apache-cassandra-5.0 package. These issues are resolved in later releases. See references for individual vulnerability details...

PYSEC-2026-1053 Openstack DBaaS (Trove) Improper Link Resolution Before File Access

The writeconfig function in trove/guestagent/datastore/experimental/mongodb/service.py, resetconfiguration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, writeconfig function in trove/guestagent/datastore/experimental/redis/service.py, writemycnf function in...

GO-2026-5467 Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation in github.com/authorizerdev/authorizer

Authorizer: CQL/N1QL Injection in Cassandra and Couchbase Backends via fmt.Sprintf String Interpolation in github.com/authorizerdev/authorizer...

CVE-2026-47846

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

CVE-2026-47846

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

CVE-2026-47846

Bitnami Cassandra container images are affected by a retained default superuser vulnerability: when CASSANDRA_USER is customized, the init script creates a new superuser but may not drop the built-in cassandra account, leaving cassandra:cassandra active as an unintended access path. This can allo...

CVE-2026-47846

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

BIT-CASSANDRA-2026-47846 Default superuser cassandra:cassandra left active when CASSANDRA_USER is customized

Bitnami Cassandra container images are affected by a retained default superuser vulnerability. When a custom administrator account is configured via the CASSANDRAUSER environment variable, the container initialization script creates the new superuser account but fails to drop the built-in cassand...

PT-2026-50715

Name of the Vulnerable Software and Affected Versions Bitnami Cassandra container images versions 4.0.x prior to 4.0.20-photon-5-r7 Bitnami Cassandra container images versions 4.1.x prior to 4.1.11-photon-5-r7 Bitnami Cassandra container images versions 5.0.x prior to 5.0.8-photon-5-r4 /...

ROOT-APP-MAVEN-CVE-2026-27314 CVE-2026-27314 in io.root.org.apache.cassandra:cassandra-all - Patched by Root

Root has patched CVE-2026-27314 in the io.root.org.apache.cassandra:cassandra-all package for Root:Maven. Multiple fixed versions available...

CVE-2026-50010 vulnerabilities

Vulnerabilities for packages: cassandra, hadoop-fips, apache-pulsar-fips, thingsboard, commercial-elasticsearch, kayenta, reposilite, wazuh-indexer, elasticsearch, kafbat-ui-fips, knative-kafka-broker-fips, management-api-for-apache-cassandra-5.0, celeborn, request-9047-keycloak-fips, kafbat-ui,...

GHSA-C653-97M9-RCG9 vulnerabilities

Vulnerabilities for packages: cassandra, hadoop-fips, apache-pulsar-fips, thingsboard, commercial-elasticsearch, kayenta, reposilite, wazuh-indexer, elasticsearch, kafbat-ui-fips, knative-kafka-broker-fips, management-api-for-apache-cassandra-5.0, celeborn, request-9047-keycloak-fips, kafbat-ui,...