CVE-2026-33557 vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, apache-nifi, debezium, debezium-connector-spanner, debezium-connector-ibmi...

GHSA-28JG-CGG7-J4WC vulnerabilities

Vulnerabilities for packages: debezium-connector-informix, apache-nifi, debezium, debezium-connector-spanner, debezium-connector-ibmi...

CLEANSTART-2026-KB76878 When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written

Multiple security vulnerabilities affect the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. See references for individual vulnerability details...

CVE-2026-0636 vulnerabilities

Vulnerabilities for packages: ruby4.0-bouncy-castle-java, apache-nifi, jenkins, ruby3.3-bouncy-castle-java, keycloak, apache-nifi-registry, zipkin, ruby3.2-bouncy-castle-java, ruby3.4-bouncy-castle-java, logstash, gradle, thingsboard, wildfly, spark, kserve-modelmesh, druid, jruby, sonarqube,...

GHSA-CJ8J-37RH-8475 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, wildfly, apache-nifi, gradle, jenkins...

CVE-2026-3505 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, wildfly, apache-nifi, gradle, jenkins...

CVE-2026-3505 vulnerabilities

Vulnerabilities for packages: jenkins, wildfly, apache-nifi, gradle, apache-nifi-registry...

GHSA-CJ8J-37RH-8475 vulnerabilities

Vulnerabilities for packages: jenkins, wildfly, apache-nifi, gradle, apache-nifi-registry...

GHSA-WG6Q-6289-32HP vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard, keycloak, sonarqube, wildfly, apache-nifi, kserve-modelmesh, logstash, zipkin, apache-pulsar, druid, jenkins, jruby...

PT-2026-32513

Name of the Vulnerable Software and Affected Versions Apache NiFi affected versions not specified Description The TinkerpopClientService component of the Apache NiFi data processing platform contains access control errors. Specifically, it lacks the required Execute Code permission, which could...

GHSA-2M67-WJPJ-XHG9 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi, logstash, apicurio-registry, trino, camunda, logstash-fips, keycloak-config-cli, flyway, flyway-fips, camunda-zeebe, apache-nifi-registry...

GHSA-2M67-WJPJ-XHG9 vulnerabilities

Vulnerabilities for packages: apicurio-registry, apache-nifi-registry, flyway, apache-nifi, trino, keycloak-config-cli, jenkins...

CVE-2026-22733 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

GHSA-8HFC-FQ58-R658 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

CVE-2026-22731 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry...

CVE-2026-22733 vulnerabilities

Vulnerabilities for packages: camunda, camunda-zeebe, apache-nifi-registry...

CVE-2026-22731 vulnerabilities

Vulnerabilities for packages: camunda, camunda-zeebe, apache-nifi-registry...

GHSA-MGVC-8Q2H-5PGC vulnerabilities

Vulnerabilities for packages: camunda, camunda-zeebe, apache-nifi-registry...

GHSA-8HFC-FQ58-R658 vulnerabilities

Vulnerabilities for packages: camunda, camunda-zeebe, apache-nifi-registry...

CLEANSTART-2026-EI62818 Security fixes for ghsa-3677-xxcr-wjqv, ghsa-qqpg-mvqg-649v, ghsa-x44p-gvrj-pj2r applied in versions: 2.7.2-r0

Multiple security vulnerabilities affect the apache-nifi package. These issues are resolved in later releases. See references for individual vulnerability details...