{"action":"Upgrade org.apache.cassandra:cassandra-all to 4.0.20 or later.","affected":[{"fixed":"4.0.20","introduced":"4.0"}],"component":"org.apache.cassandra:cassandra-all","cve_ids":["CVE-2026-27315"],"ecosystem":"Maven","epss":0.00169,"exploited":false,"fixed_versions":["4.0.20"],"ghsa_id":"GHSA-fh34-c629-p8xj","id":"tcs_01M5N8W0RPJHA28HS5T0H7CZZ4","modified_at":"2026-04-09T10:11:15.577809410Z","published_at":"2026-04-07T18:31:37Z","references":["https://osv.dev/vulnerability/GHSA-fh34-c629-p8xj","https://nvd.nist.gov/vuln/detail/CVE-2026-27315","https://github.com/apache/cassandra","https://issues.apache.org/jira/browse/CASSANDRA-21180","https://lists.apache.org/thread/ft77zrk2mzt8qsch4g6jqjj4901d22k3","http://www.openwall.com/lists/oss-security/2026/04/07/8"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-fh34-c629-p8xj","url":"https://osv.dev/vulnerability/GHSA-fh34-c629-p8xj"},{"source":"nvd","source_id":"CVE-2026-27315","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27315"}],"summary":"Apache Cassandra has sensitive Information Leak in cqlsh"}