GHSA-VF5J-865M-MQ7C vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

CVE-2026-42779 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

GHSA-995C-6RP3-4M4X vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

GHSA-2J9M-25XV-MP6R Apache NiFi is missing the Restricted annotation with the Execute Code Required Permission

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

EUVD-2026-28593

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

CVE-2026-39816 Apache NiFi: Missing Execute Code Required Permission on TinkerpopClientService

The optional extension component TinkerpopClientService is missing the Restricted annotation with the Execute Code Required Permission in Apache NiFi 2.0.0-M1 through 2.8.0. The TinkerpopClientService supports configuration of ByteCode Submission for the Script Submission Type, enabling Groovy...

Apache NiFi 安全漏洞

Apache NiFi is a data processing and distribution system developed by the Apache Foundation in the United States. This system is primarily used for data routing, transformation, and intermediate logic within the system. Vulnerabilities exist in versions 2.8.0 of Apache NiFi, as the optional...

CVE-2026-41409 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

GHSA-F2WH-GRMH-R6JM vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

GHSA-F2WH-GRMH-R6JM vulnerabilities

Vulnerabilities for packages: jenkins, apache-hop, hadoop-fips, guacamole-client, apache-nifi, apache-hop-fips...

GHSA-CVC6-Q2CP-2XHW vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi...

CVE-2026-22748 vulnerabilities

Vulnerabilities for packages: thingsboard, apache-nifi...

CVE-2026-22747 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, apache-nifi...

GHSA-2JRG-RF5X-568G vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, apache-nifi...

CVE-2026-22754 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, apache-nifi...

GHSA-4WRG-8WPC-H923 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, apache-nifi...

CVE-2026-22753 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, apache-nifi...

GHSA-4VRC-J85C-598C vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, apache-nifi...

CLEANSTART-2026-VN28553 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc

Multiple security vulnerabilities affect the apache-nifi package. Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. See references for individual vulnerability details...

CLEANSTART-2026-GN46454 When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written

Multiple security vulnerabilities affect the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. See references for individual vulnerability details...