Maven/org.apache.cassandra:cassandra-all CVE-2026-27315: medium 5.5, EPSS 0.17%
Apache Cassandra has sensitive Information Leak in cqlsh
Action: Upgrade org.apache.cassandra:cassandra-all to 4.0.20 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0 | 4.0.20 | - |
Fixed versions
| 4.0.20 |
Sources
- osv: GHSA-fh34-c629-p8xj
- nvd: CVE-2026-27315
- https://github.com/apache/cassandra
- https://issues.apache.org/jira/browse/CASSANDRA-21180
- https://lists.apache.org/thread/ft77zrk2mzt8qsch4g6jqjj4901d22k3
- http://www.openwall.com/lists/oss-security/2026/04/07/8
CVE-2026-27315 · published · modified · JSON