704 matches found
CVE-2026-68981
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted...
CVE-2026-68981
The CVE-2026-68981 issue affects Apache NiFi versions 1.5.0 through 2.10.0, where gzip-encoded HTTP requests to the REST API are processed via a Jersey encoding filter. A configurable maximum is enforced on the compressed payload rather than the decompressed output, which could allow a malicious ...
EUVD-2026-52421
Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion against the owning Parameter Context using the supplied Parameter Context Identifier and Asset Identifier. The framework...
CVE-2026-62354 Apache NiFi: Incorrect Authorization for Parameter Context Validation Requests
Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The proposed values override current configuration, enabling users with read access to invoke predefined component validation...
Apache NiFi - Information Disclosure
Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...
GHSA-88FW-V6X4-3F58 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-41695 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-88FW-V6X4-3F58 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-72PG-X5F8-J25J vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-3CHG-M5W7-QFV5 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-41843 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-CJPG-RGQ5-FR37 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-957G-F97V-VPPC vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-MQ64-J8F9-9GCJ vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-41846 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-X23C-287F-QQV5 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
GHSA-H3QP-GQRC-Q736 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...
CVE-2026-41853 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry...