Threats affecting pkg:maven/Apache Software Foundation/org.apache.cassandra:cassandra-all

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.5%	CVE-2026-32588Apache Cassandra · Uncontrolled Resource Consumption Medium6.5EPSS 0.5%2026-04-07CVE Database V5CVE-2026-32588 Authenticated DoS over CQL in Apache Cassandra 4.0, 4.1, 5.0 allows authenticated user to raise query latencies via repeated password changes. Users are recommended to upgrade to version 4.0.20, 4.1.11, 5.0.7, which fixes this issue. EPSS 0.5%Vulnerability Apache Software Foundation CWE-400	CVE Database V5	2026-04-07
High	8.8	EPSS 0.3%	CVE-2026-27314Apache Cassandra · Privilege Defined With Unsafe Actions High8.8EPSS 0.3%2026-04-07CVE Database V5CVE-2026-27314 Privilege escalation in Apache Cassandra 5.0 on an mTLS environment using MutualTlsAuthenticator allows a user with only CREATE permission to associate their own certificate identity with an arbitrary role, including a superuser role, and authenticate as that role via ADD IDENTITY. Users are recommended to upgrade to version 5.0.7+, which fixes this issue. EPSS 0.3%Vulnerability Apache Software Foundation CWE-267	CVE Database V5	2026-04-07

Page 1 of 1