Please report suspected security vulnerabilities privately to the Apache Security Team at security@apache.org, following the ASF process at https://www.apache.org/security/. Do not open public GitHub issues or pull requests for security reports.
This repository is part of the Apache Cassandra project. The project's security model - what is in and out of scope, the trust boundaries it assumes, the security properties it provides and disclaims, and how findings are triaged - is documented in the main apache/cassandra repository: