Homepage

CVE-2025-24970 The advisory has been revoked - it doesn't affect any version of package management-api-for-apache-cassandra-4.1  (opens in a new tab)

Threat Intelligence

EPSS
2.19% (82nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-WOLFILATEST-MANAGEMENTAPIFORAPACHECASSANDRA41-15401503
  • published5 Mar 2026
  • disclosed10 Feb 2025
Report a new vulnerability Found a mistake?

Introduced: 10 Feb 2025

CVE-2025-24970  (opens in a new tab)

Amendment

The Wolfi security team deemed this advisory irrelevant for Wolfi:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream management-api-for-apache-cassandra-4.1 package and not the management-api-for-apache-cassandra-4.1 package as distributed by Wolfi.

Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash. Version 4.1.118.Final contains a patch. As workaround its possible to either disable the usage of the native SSLEngine or change the code manually.