886 matches found
GHSA-VF5J-865M-MQ7C vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins...
GHSA-995C-6RP3-4M4X vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins...
CVE-2026-42779 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins...
GHSA-2J9M-25XV-MP6R Apache NiFi is missing the Restricted annotation with the Execute Code Required Permission
The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...
Apache NiFi is missing the Restricted annotation with the Execute Code Required Permission
The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...
EUVD-2026-28593
The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...
CVE-2026-39816 Apache NiFi: Missing Execute Code Required Permission on TinkerpopClientService
The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...
CVE-2026-39816 Apache NiFi: Missing Execute Code Required Permission on TinkerpopClientService
The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...
CVE-2026-39816
CVE-2026-39816 impacts Apache NiFi 2.0.0-M1 through 2.8.0 where the optional TinkerpopClientService (in the graph bundle, nifi-other-graph-services-nar) lacks the @Restricted annotation for Execute Code permission. This allows a flow designer with restricted privileges to configure ByteCode Submi...
Apache NiFi 安全漏洞
Apache NiFi is a data processing and distribution system developed by the Apache Foundation in the United States. This system is primarily used for data routing, transformation, and intermediate logic within the system. Vulnerabilities exist in versions 2.8.0 of Apache NiFi, as the optional...
CVE-2026-41409 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins...
GHSA-F2WH-GRMH-R6JM vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins...
GHSA-F2WH-GRMH-R6JM vulnerabilities
Vulnerabilities for packages: jenkins, apache-hop, apache-nifi, hadoop-fips, apache-hop-fips, guacamole-client...
GHSA-CVC6-Q2CP-2XHW vulnerabilities
Vulnerabilities for packages: apache-nifi, thingsboard...
CVE-2026-22748 vulnerabilities
Vulnerabilities for packages: apache-nifi, thingsboard...
CVE-2026-22747 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, apache-nifi...
GHSA-2JRG-RF5X-568G vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, apache-nifi...
CVE-2026-22754 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, apache-nifi...