693 matches found
CLEANSTART-2026-EP51501 Security fixes for CVE-2024-6763, CVE-2025-11143, CVE-2026-1225, CVE-2026-22184, CVE-2026-27171, CVE-2026-34757, CVE-2026-44431, CVE-2026-44432, ghsa-25qh-j22f-pwp8, ghsa-72hv-8253-57qq, ghsa-gc5v-m9x4-r6x2, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, ghsa-qh8g-58pp-2wxh, ghsa-qqpg-mvqg-649v applied in versions: 4.0.1-r1, 4.0.1-r2, 4.0.1-r3, 4.0.1-r4
Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-LZ07533 Security fixes for CVE-2026-44431, CVE-2026-44432, ghsa-gc5v-m9x4-r6x2, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 3.8.0-r3, 3.8.0-r7
Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SP91806 Security fixes for CVE-2015-2104, CVE-2023-27043, CVE-2024-12254, CVE-2024-12718, CVE-2024-12798, CVE-2024-12801, CVE-2024-27137, CVE-2024-6232, CVE-2024-6923, CVE-2024-9287, CVE-2025-0938, CVE-2025-23015, CVE-2025-4138, CVE-2025-4330, CVE-2025-4516, CVE-2025-4517, CVE-2025-58057, CVE-2026-1225, CVE-2026-42583, ghsa-25qh-j22f-pwp8, ghsa-3p8m-j85q-pgmj, ghsa-5mg8-w23w-74h3, ghsa-6v67-2wr5-gvf4, ghsa-72hv-8253-57qq, ghsa-7g45-4rm6-3mm3, ghsa-mj4r-2hfc-f8p6, ghsa-pr98-23f8-jwxv, ghsa-qqpg-mvqg-649v applied in versions: 4.0.17-r1, 4.1.9-r0, 5.0.6-r1, 5.0.6-r2
Multiple security vulnerabilities affect the cassandra-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-3643-7V76-5CJ2 PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries
Summary PraisonAI exposes optional SQL/CQL-backed knowledge-store implementations that build table and index identifiers from unvalidated name and collection arguments. Applications that pass untrusted collection names into these backends can trigger SQL or CQL injection. Details This issue affec...
CVE-2026-33109
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
CVE-2026-33844
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
GHSA-RWM7-X88C-3G2P vulnerabilities
Vulnerabilities for packages: s3proxy, cassandra, infinispan, keycloak, seata, grpc-java-fips, cassandra-reaper, neo4j, celeborn, management-api-for-apache-cassandra-5.0, trino, kafbat-ui, management-api-for-apache-cassandra-4.1, solr, apache-hop-fips, spark, camunda, cassandra-fips, hadoop-fips,...
CVE-2026-42577 vulnerabilities
Vulnerabilities for packages: s3proxy, cassandra, infinispan, keycloak, seata, grpc-java-fips, cassandra-reaper, neo4j, celeborn, management-api-for-apache-cassandra-5.0, trino, kafbat-ui, management-api-for-apache-cassandra-4.1, solr, apache-hop-fips, spark, camunda, cassandra-fips, hadoop-fips,...
EUVD-2026-28451
Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
EUVD-2026-28448
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
PT-2026-39004
Name of the Vulnerable Software and Affected Versions PraisonAI versions 2.4.1 through 4.6.33 Description PraisonAI is a multi-agent teams system that exposes optional SQL/CQL-backed knowledge-store implementations. These implementations build table and index identifiers using unvalidated name an...
CVE-2026-33109
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
CVE-2026-33844
Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
CVE-2026-33844 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-33844
Improper input validation in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network...
CVE-2026-33844
Azure Managed Instance for Apache Cassandra is affected by a vulnerability described as improper input validation that enables an authorized attacker to perform remote code execution over the network. The CVSS v3.1 base score is 9.0 (CRITICAL) with network attack, low complexity, required privile...
CVE-2026-33844 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-33109 Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability
...
CVE-2026-33109
CVE-2026-33109 affects Azure Managed Instance for Apache Cassandra. The vulnerability is described as improper access control that allows an authenticated, network-adjacent attacker to execute code on the instance. The CVSS 3.1 base score is 9.9 (CRITICAL) with NETWORK attack vector, LOW attack c...