CLEANSTART-2026-BQ50387 Security fixes in apache-nifi 2.6.0-r3

🗓️ 30 Jul 2026 07:10:53Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Security fixes in apache nifi 2.6.0-r3 addressing fifty one vulnerabilities.

Reporter	Title	Published	Views	Family All 2934
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2025 - Multiple CVEs addressed	29 Jan 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: The Apache Commons Lang library that is shipped with IBM ApplinX is vulnerable to an Uncontrolled Recursion vulnerability (CVE-2025-48924).	11 Jun 202621:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to uncontrolled recursion due to Apache Commons Lang.	10 Feb 202617:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM WebSphere Application Server and IBM WebSphere Application Server Liberty, bundled with WebSphere Remote Server, are affected by a denial of service due to jose4j (CVE-2024-29371)	7 Jul 202618:25	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Commons Lang may affect IBM Decision Optimization for IBM Cloud Pak for Data (CVE-2025-48924)	26 Sep 202508:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.0	30 Jun 202616:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring Framework [CVE-2026-41839, CVE-2026-41840, CVE-2026-41845, CVE-2026-41853, CVE-2026-41854]	27 Jul 202620:07	–	ibm
IBM Security Bulletins	Security Bulletin: Uncontrolled Recursion vulnerability in Apache Commons Lang library affect Tivoli Netcool/OMNIbus WebGUI (CVE-2025-48924)	24 Oct 202503:53	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in IBM WebSphere Application Server Liberty	27 Apr 202607:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis is affected by Denial-of-Service (DoS) due to use of jose4j library	9 Jan 202615:40	–	ibm

Source	Link
github	www.github.com/apache/nifi

01 Aug 2026 18:36Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.19.8

CVSS 48.7

CVSS 21.7

CVSS 33.3

EPSS0.0351

SSVC