CVE-2023-34468-POC

CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Apache NiFi = 1.21.0 における H2 データベース RUNSCRIPT を介したリモートコード実行 脆弱性 Apache NiFi にはデフォルトで H2 データベース JAR が同梱されています。DBCPConnectionPool コントローラサービスを構成してこの H2 ドライバを使用できます。H2 は RUNSCRIPT ステートメントをサポートしており、リモート URL から SQL ファイルを取得して実行します。その SQL ファイルは CREATE ALIAS...

CVE-2023-40037

CVE-2023-40037: Apache NiFi における JDBC および JNDI 接続 URL の不完全な検証 Apache NiFi 1.21.0 から 1.23.0 は、複数の Processor および Controller Service において JDBC および JNDI JMS アクセスをサポートしていますが、その接続 URL 検証は巧妙に細工された入力に対して十分な保護を提供していません。認証済みかつ承認済みのユーザーは、カスタム入力フォーマットを使用して接続 URL 検証をバイパスできます。この修正は、接続 URL...

asf__nifi_CVE-2023-36542_1-22-0

Apache NiFi ステータス リソース 連絡先 !Track Issueshttps://img.shields.io...

CVE-2023-34468

CVE-2023-34468: Ejecución Remota de Código a través de Componentes de BD en Apache NiFi Los Servicios de Controlador DBCPConnectionPool y HikariCPConnectionPool en Apache NiFi 0.0.2 hasta 1.21.0 permiten que un usuario autenticado y autorizado configure una URL de Base de Datos con el controlador...

My-Exploits

My-Exploits Vulnerability research I have done on four widely deployed platform services: Keycloak, Apache NiFi, HashiCorp Vault and HashiCorp Nomad. For each finding this repo carries the write-once artifacts I actually use, a Metasploit module where it made sense, a standalone Python proof of...

CVE-2023-34468-POC

CVE-2023-34468 — Apache NiFi 1.21.0 RCE PoC Apache NiFi = 1.21.0 における H2 データベースの RUNSCRIPT を介したリモートコード実行 脆弱性 Apache NiFi には、デフォルトで H2 データベースの JAR が同梱されています。DBCPConnectionPool コントローラサービスは、この H2 ドライバを使用するように設定できます。H2 は、リモート URL から SQL ファイルを取得して実行する RUNSCRIPT ステートメントをサポートしています。この SQL ファイルは、 CREATE...

CLEANSTART-2026-MR78444 UTF8DataInputJsonParser

Security vulnerability affects the apache-nifi package. UTF8DataInputJsonParser...

CLEANSTART-2026-MS81723 NumberInput

Security vulnerability affects the apache-nifi package. NumberInput...

CLEANSTART-2026-DY58341 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID

Security vulnerability affects the apache-nifi package. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID...

BIT-NIFI-2026-87976 Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests. The default file persistence provider used coordinates as filesystem path components without rejected...

BIT-NIFI-2026-86089 Apache NiFi: Missing Process Group Authorization for Connector Migration

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests. The framework authorized both methods against the target Connector alone, without evaluating access ...

BIT-NIFI-2026-82561 Apache NiFi: Missing Authorization for Components Referenced in Flow Update Methods

Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flow replacement together with versioned flow update and rebase operations. Framework authorization for these methods was...

BIT-NIFI-2026-81866 Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration. Updating or verifying a Connector configuration step can apply Asset and Secret...

BIT-NIFI-2026-70469 Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding. The framework enforcement filter did not check multiple instances of the Content-Encoding header and d...

CLEANSTART-2026-SV46004 client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap

Security vulnerability affects the apache-nifi package. A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap...

CLEANSTART-2026-FQ92351 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-FV50118 Path-traversal vulnerability in QOS

Security vulnerability affects the apache-nifi package. Path-traversal vulnerability in QOS...

CLEANSTART-2026-ZG24378 Security fix for CVE-2025-61727 applied in: apache-nifi 2.10.0-r4, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, calico-fips 3.31.2-r1, cert-manager-cmctl-fips 2.4.0-r1, cert-manager-fips 1.18.2-r0, cert-manager-fips 1.19.1-r0, cert-manager-webhook-pdns-fips 2.2.0-r0, chartmuseum-fips 0.15.0-r4, chartmuseum-fips 0.16.3-r3, cloudnative-pg-fips 1.24.4-r0, cloudnative-pg-fips 1.25.4-r0, cloudnative-pg-fips 1.26.2-r0, cni-plugin-flannel 1.6.0-r0, cni-plugins-fips 1.8.0-r0, configmap-reload 0.15.0-r0, consul-k8s-fips 1.7.8-r0, consul-k8s-fips 1.8.6-r0, consul-k8s-fips 1.9.1-r0, cosign 2.4.3-r0, cosign 2.5.3-r0, dex-fips 2.41.1-r4, dex-fips 2.42.1-r4, dex-fips 2.43.1-r4, docker-fips 28.4.0-r0, druid-exporter-fips 0.10-r1, druid-exporter-fips 0.11-r2, eck-operator 3.2.0-r1, eks-distro-kube-apiserver-fips 1.34.2-r0, elastic-beats-fips 9.2.2-r0, external-dns 0.18.0-r0, external-dns-fips 0.20.0-r0, external-secrets 0.20.4-r0, flux-notification-controller-fips 1.5.0-r0, go-discover-fips 0_git20250325-r0, go-fips-1.25 1.25.6-r1, gomplate-fips 4.3.3-r3, harbor-registry 3.0.0.1-r2, harbor-registry-fips 2.6.2-r0, harbor-registry-fips 2.7.1-r0, harbor-registry-fips 2.8.3-r0, harbor-registry-fips 3.0.0-r1, helm-fips 3.17-4-r0, helm-fips 3.19.0-r1, helm-fips 4.0.1-r0, helm-operator-fips 1.39.0-r1, helm-operator-fips 1.41.1-r1, ip-masq-agent 2.12.6-r1, istio-operator-fips 1.25.5-r0, istio-operator-fips 1.26.7-r0, istio-operator-fips 1.27.4-r0, istio-operator-fips 1.28.1-r0, istio-operator-fips 1.4.10-r6, istio-pilot-discovery 1.28.1-r0, istio-pilot-discovery-fips 1.25.5-r0, istio-pilot-discovery-fips 1.26.7-r0, istio-pilot-discovery-fips 1.27.4-r0, istio-pilot-discovery-fips 1.28.1-r0, k8ssandra-client-fips 0.7.0-r2, k8ssandra-client-fips 0.7.0-r4, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.26.0-r0, k8ssandra-operator-fips 1.27.0-r0, k8ssandra-operator-fips 1.28.0-r0, k8ssandra-operator-fips 1.29.0-r0, kaniko-fips 1.24.0-r0, kapp-controller 0.59.0-r1, kapp-controller-fips 0.59.0-r1, kube-rbac-proxy-fips 0.17.1-r1, kube-rbac-proxy-fips 0.18.2-r2, kube-rbac-proxy-fips 0.19.1-r1, kube-state-metrics 2.16.0-r3, kube-state-metrics-fips 2.14.0-r0, kube-state-metrics-fips 2.15.0-r0, kube-state-metrics-fips 2.17.0-r0, kubernetes 1.31.14-r1, kubernetes 1.32-10-r1, kubernetes 1.33.6-r0, kubernetes 1.34.2-r0, kubernetes-csi-external-resizer-fips 2.0.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-csi-node-driver-registrar-fips 2.15.0-r0, kubernetes-fips 1.31.14-r0, kubernetes-fips 1.32.10-r0, kubernetes-fips 1.32.2-r0, kubernetes-fips 1.33.6-r0, kured 1.20.0-r0, metallb-fips 0.14.9-r1, metrics-server 0.8.0-r0, metrics-server-fips 0.5.2-r1, metrics-server-fips 0.6.4-r1, metrics-server-fips 0.7.2-r3, metrics-server-fips 0.8.0-r5, minio-operator 7.1.1-r3, mongodb 8.2.1-r1, mongodb 8.2.6-r1, multus-cni-fips 4.0.2-r3, multus-cni-fips 4.1.4-r4, multus-cni-fips 4.2.3-r1, nginx-prometheus-exporter 1.5.1-r0, nginx-prometheus-exporter-fips 1.5.1-r0, nvidia-container-toolkit 1.19.0-r0, openbao-fips 2.4.4-r2, opensearch-k8s-operator-fips 2.5.1-r1, opensearch-k8s-operator-fips 2.6.1-r7, opensearch-k8s-operator-fips 2.7.0-r8, opentofu-fips 1.10.7-r0, opentofu-fips 1.7.10-r0, opentofu-fips 1.8.11-r0, opentofu-fips 1.9.4-r1, prometheus-fips 3.5.0-r4, prometheus-fips 3.9.0-r0, prometheus-node-exporter 1.8.0-r3, prometheus-node-exporter-fips 1.10.2-r0, prometheus-node-exporter-fips 1.7.0-r1, prometheus-node-exporter-fips 1.8.2-r1, prometheus-node-exporter-fips 1.9.1-r0, prometheus-operator-fips 0.85.0-r1, prometheus-operator-fips 0.86.2-r0, prometheus-operator-fips 0.87.0-r0, prometheus-redis-exporter-fips 1.77.0-r0, prometheus-redis-exporter-fips 1.78.0-r0, prometheus-redis-exporter-fips 1.79.0-r0, promxy 0.0.93-r1, rabbitmq-messaging-topology-operator 1.15.0-r1, restic 0.18.0-r0, runc 1.1.14-r0, smarter-device-manager-fips 1.20.12-r0, spark-operator 2.2.1-r0, spire-server-fips 1.13.3-r0, stakater-reloader-fips 1.1.0-r3, stakater-reloader-fips 1.2.1-r1, stakater-reloader-fips 1.3.0-r0, stakater-reloader-fips 1.4.10-r0, step-issuer-fips 0.9.11-r1, step-issuer-fips 0.9.9-r2, tekton-pipelines 1.5.0-r0, tekton-pipelines-fips 1.5.0-r0, tempo 2.9.0-r0, terragrunt-fips 0.90.2-r0, terragrunt-fips 0.91.5-r0, terragrunt-fips 0.92.1-r0, terragrunt-fips 0.93.13-r1, thanos-operator-fips 0.3.7-r0, trino 479-r0, velero 1.17.0-r1, velero-fips 1.14.1-r1, velero-fips 1.16.2, vertical-pod-autoscaler 1.5.1-r0, vertical-pod-autoscaler-fips 1.5.1-r0, volume-modifier-for-k8s 0.9.0-r0, volume-modifier-for-k8s-fips 0.9.0-r0, wave-fips 0.10.0-r0, wave-fips 0.9.0-r3

CVE-2025-61727 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QY80127 Security fix for CVE-2026-25679 applied in: apache-nifi 2.10.0-r4, argo-cd 3.2.7-r1, argo-cd-fips 3.2.5-r0, argo-workflows 3.6.18-r2, argo-workflows 3.7.8-r1, argo-workflows 3.7.9-r1, argo-workflows-fips 3.7.8-r3, aws-ebs-csi-driver 1.54.0-r1, aws-efs-csi-driver 2.2.0-r1, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-flb-cloudwatch 1.9.4-r0, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, aws-privateca-issuer 1.7.0-r0, aws-privateca-issuer-fips 1.7.0-r1, cadvisor 0.56.2-r0, cadvisor-fips 0.55.1-r0, calico-fips 3.28.5-r4, calico-fips 3.31.2-r2, cass-operator 1.28.1-r0, cert-manager-fips 1.17.4-r1, certificate-transparency-trillian-ctserver 1.3.2-r1, certificate-transparency-trillian-ctserver-fips 1.3.2-r0, cilium 1.17.15-r0, cilium 1.18.9-r0, cilium 1.19.3-r0, cloudnative-pg-fips 1.24.4-r2, cloudnative-pg-fips 1.25.4-r2, cloudnative-pg-fips 1.26.3-r0, cloudnative-pg-fips 1.27.3-r0, cloudnative-pg-fips 1.28.1-r0, cni-plugin-flannel 1.6.0-r0, configmap-reload 0.15.0-r0, consul-k8s-fips 1.9.1-r2, coredns 1.14.1-r1, cosign 2.4.3-r0, cosign 2.5.3-r0, crossplane 2.0.2-r1, crossplane-provider-aws 2.3.0-r1, dcgm-exporter 4.5.1-r0, descheduler 0.34.0-r2, distribution 3.0.0-r1, doppler-kubernetes-operator 1.7.1-r1, druid-exporter-fips 0.10-r3, druid-exporter-fips 0.11-r4, druid-exporter-fips 0.8-r2, druid-exporter-fips 0.9-r2, dynamic-localpv-provisioner 4.4.0-r3, eks-distro-kube-apiserver 1.34.2-r0, eks-distro-kube-apiserver-fips 1.34.2-r0, eks-distro-kube-controller-manager-fips 1.34.2-r0, eks-distro-kube-proxy-fips 1.35.7-r1, eks-distro-kube-scheduler-fips 1.34.3-r0, envoy-ratelimit 0.0.0_git20251231-r0, esbuild 0.25.0-r0, external-dns 0.18.0-r1, external-secrets-fips 0.17.0-r2, fluent-bit-plugin-loki 3.6.5-r0, fluent-operator 3.6.0-r0, fluent-operator-fips 3.2.0-r6, fluent-operator-fips 3.7.0.-r1, flux-image-automation-controller-fips 4.0.1-r0, flux-notification-controller-fips 1.5.0-r0, git-lfs 3.7.0-r3, git-sync 4.5.1-r1, gitlab-pages 18.7.1-r0, gitlab-pages-fips 18.7.1-r0, go-fips-1.25 1.25.7-r0, grafana-alloy-fips 1.12.1-r2, grafana-mimir 3.0.2-r0, grafana-mimir-fips 3.0.2-r0, grafana-rollout-operator 0.35.0-r0, haproxy-ingress 0.15.1-r0, harbor 2.12.4-r0, harbor 2.13.5-r0, harbor 2.14.3-r0, harbor 2.15.0-r0, harbor-fips 2.13.4-r1, harbor-fips 2.13.5-r0, harbor-fips 2.14.2-r2, harbor-fips 2.14.3-r0, harbor-fips 2.15.0-r0, harbor-registry 3.0.0.1-r3, helm 3.19.5-r0, helm 3.20.0-r0, helm 4.0.1-r1, helm 4.1.0-r1, helm 4.1.1-r2, helm-operator-fips 1.41.1-r2, hubble-ui 0.13.3-r1, hubble-ui-fips 0.13.3-r1, ip-masq-agent 2.12.6-r1, istio 1.28.3-r0, istio-fips 1.25.5-r2, istio-fips 1.26.8-r0, istio-fips 1.27.7-r1, istio-fips 1.28.4-r1, istio-fips 1.29.1-r0, istio-pilot-discovery-fips 1.28.3-r1, jitsucom-bulker 2.11.913-r1, k8ssandra-client-fips 0.5.0-r7, k8ssandra-client-fips 0.6.4-r6, k8ssandra-client-fips 0.7.0-r4, k8ssandra-client-fips 0.8.10-r0, k8ssandra-client-fips 0.8.8-r0, k8ssandra-client-fips 0.8.9-r0, k8ssandra-operator 1.26.0-r0, k8ssandra-operator-fips 1.29.0-r1, kafka 4.0.1-r3, kafka-fips 4.0.1-r3, kafka_exporter-fips 1.6.0-r0, kafka_exporter-fips 1.7.0-r1, karpenter 1.9.0-r0, karpenter-fips 1.8.6-r1, karpenter-fips 1.9.0-r0, keda-fips 2.18.3-r3, kserve 0.16.0-r0, kserve-rest-proxy 0.12.0-r1, kube-rbac-proxy 0.20.2-r1, kube-rbac-proxy-fips 0.20.2-r1, kube-state-metrics 2.16.0-r3, kube-state-metrics-fips 2.18.0-r1, kube-vip 1.0.4-r0, kubernetes-csi-driver-nfs-fips 4.12.1-r1, kubernetes-csi-driver-nfs-fips 4.13.0-r0, kubernetes-csi-external-attacher 4.10.0-r0, kubernetes-csi-external-attacher-fips 4.10.0-r0, kubernetes-csi-external-provisioner-fips 6.1.0-r0, kubernetes-csi-external-provisioner-fips 6.2.0-r0, kubernetes-csi-external-resizer 2.0.0-r0, kubernetes-csi-external-resizer-fips 2.0.0-r0, kubernetes-csi-external-snapshotter-fips 8.4.0-r0, kubernetes-csi-external-snapshotter-fips 8.5.0-r0, kubernetes-csi-livenessprobe-fips 2.18.0-r0, kubernetes-csi-node-driver-registrar 2.13.0-r0, kubernetes-csi-node-driver-registrar-fips 2.15.0-r1, kubernetes-csi-node-driver-registrar-fips 2.16.0-r0, kubernetes-dashboard 7.14.0-r0, kubernetes-dashboard-api 1.14.0-r1, kubernetes-dashboard-api-fips 1.14.0-r1, kubernetes-dashboard-auth 1.4.0-r1, kubernetes-dashboard-auth-fips 1.4.0-r1, kubernetes-dashboard-metrics-scraper 1.2.2-r1, kubernetes-dashboard-metrics-scraper-fips 1.2.2-r1, kubernetes-dashboard-web 1.7.0-r0, kubernetes-dns-node-cache 1.26.7-r1, kubernetes-dns-node-cache-fips 1.26.7-r2, kubernetes-event-exporter 1.7-r1, kubernetes-event-exporter-fips 1.7-r0, kubernetes-fips 1.35.0-r0, kubernetes-replicator-fips 2.12.2-r1, kubescape 3.0.47-r0, kured 1.20.0-r0, kustomize 5.7.1-r3, kyverno-fips 1.13.6-r9, kyverno-fips 1.16.1-r3, kyverno-fips 1.16.3-r4, kyverno-fips 1.17.1-r3, kyverno-policy-reporter-fips 3.3.3-r4, kyverno-policy-reporter-fips 3.4.2-r4, kyverno-policy-reporter-fips 3.5.0-r4, kyverno-policy-reporter-fips 3.7.3-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r6, kyverno-policy-reporter-kyverno-plugin-fips 1.5.2-r3, linkerd2 25.12.3-r0, local-static-provisioner 2.8.0-r2, minio-operator 7.1.1-r3, minio-operator-fips 5.0.19-r0, minio-operator-fips 6.0.4-r9, minio-operator-fips 7.0.1-r8, minio-operator-fips 7.1.1-r9, mongodb 7.0.30-r0, mongodb 8.0.19-r0, neuvector-fips 5.4.8-r0, newrelic-fluent-bit-output 2.4.0-r1, newrelic-infrastructure-agent 1.71.4-r0, newrelic-nri-kube-events 2.16.4-r1, newrelic-prometheus-configurator 2.4.4-r1, nginx-prometheus-exporter 1.5.1-r1, nginx-prometheus-exporter-fips 1.5.1-r1, node-feature-discovery 0.18.3-r2, node-problem-detector 0.8.19-r2, nri-kubernetes 3.51.2-r0, nvidia-container-toolkit 1.19.0-r0, openbao 2.4.3-r1, openbao-fips 2.2.2-r6, openbao-fips 2.3.2-r4, openbao-fips 2.4.4-r4, openbao-fips 2.5.1-r1, opensearch-k8s-operator-fips 2.5.1-r2, opensearch-k8s-operator-fips 2.6.1-r2, opensearch-k8s-operator-fips 2.6.1-r7, opensearch-k8s-operator-fips 2.7.0-r8, opentelemetry-collector-contrib-fips 0.144.0-r3, opentofu-fips 1.10.9-r2, opentofu-fips 1.11.5-r1, opentofu-fips 1.7.10-r2, opentofu-fips 1.8.11-r2, opentofu-fips 1.9.4-r2, percona-xtradb-cluster-operator-fips 1.18.0-r5, pmm 3.5.0-r0, postgres-operator-fips 1.15.1-r0, prom-mysqld-exporter-fips 0.18.0-r1, prometheus-elasticsearch-exporter 1.10.0-r1, prometheus-mongodb-exporter 0.47.2-r1, prometheus-mongodb-exporter-fips 0.47.2-r1, prometheus-mysqld-exporter 0.18.0-r1, prometheus-node-exporter 1.8.0-r3, prometheus-operator 0.87.1-r1, prometheus-operator 0.89.0-r0, prometheus-redis-exporter 1.82.0-r0, prometheus-redis-exporter-fips 1.77.0-r3, prometheus-redis-exporter-fips 1.78.0-r3, prometheus-redis-exporter-fips 1.79.0-r3, prometheus-redis-exporter-fips 1.80.2-r0, prometheus-redis-exporter-fips 1.81.0-r0, prometheus-statsd-exporter 0.28.0-r1, promxy 0.0.93-r1, pulumi-kubernetes-operator 0.18.0-r1, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, restic 0.18.0-r0, runc 1.1.14-r0, sealed-secrets 0.33.1-r0, sealed-secrets 0.34.0-r0, sigstore-scaffolding 0.7.29-r2, sigstore-scaffolding 0.7.31-r2, smarter-device-manager-fips 1.20.12-r2, spire-server 1.14.1-r3, stakater-reloader 1.4.14-r0, stakater-reloader-fips 1.2.1-r3, stakater-reloader-fips 1.3.0-r2, step-issuer 0.9.11-r1, syft 1.39.0-r2, tekton-chains 0.26.0-r3, tekton-chains-fips 0.26.0-r4, tekton-pipelines 1.5.0-r4, temporal 1.5.1-r0, temporal-server-fips 1.29.2-r1, terragrunt-fips 0.94.0-r1, terragrunt-fips 0.95.1-r1, terragrunt-fips 0.96.1-r1, terragrunt-fips 0.97.2-r1, terragrunt-fips 0.98.0-r1, terragrunt-fips 0.99.4-r2, tigera-operator 1.41.1-r0, timoni 0.25.2-r0, tkn-fips 0.43.0-r4, trillian 1.7.2-r1, trino 479-r0, trust-manager 0.20.2-r1, trust-manager-fips 0.20.3-r0, trust-manager-fips 0.21.1-r0, vault 1.21.2-r0, vault-fips 1.21.2-r1, velero 1.17.2-r2, velero-fips 1.17.1-r1, velero-fips 1.17.2-r2, velero-fips 1.18.0-r0, velero-plugin-for-aws 1.10.1-r1, velero-plugin-for-aws 1.12.2-r2, velero-plugin-for-aws 1.13.1-r3, velero-plugin-for-gcp-fips 1.13.2-r0, velero-plugin-for-gcp-fips 1.13.g-r0, velero-plugin-for-microsoft-azure-fips 1.13.2-r0, vertical-pod-autoscaler 1.5.1-r3, vertical-pod-autoscaler-fips 1.5.1-r2, victoriametrics-operator 0.65.0-r1, victoriametrics-operator-fips 0.65.0-r2, wave 0.11.0-r0, wave-fips 0.9.0-r3, weaviate 1.35.2-r1, whereabouts 0.9.2-r1, yunikorn-k8shim-fips 1.7.0-r1, yunikorn-web 1.7.0-r0, yunikorn-web-fips 1.7.0-r0, zot 2.1.13-r0

CVE-2026-25679 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SD37188 Security fix for CVE-2025-67721 applied in: apache-nifi 2.7.2-r7, hazelcast 5.7.0-r1, spark-sc213-jdk17-py311 4.1.1-r2, trino 479-r0

CVE-2025-67721 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...