723 matches found
CLEANSTART-2026-VN28553 Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc
Multiple security vulnerabilities affect the apache-nifi package. Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. See references for individual vulnerability details...
CLEANSTART-2026-GN46454 When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written
Multiple security vulnerabilities affect the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. See references for individual vulnerability details...
GHSA-X2WQ-9X2F-FHJ7 vulnerabilities
Vulnerabilities for packages: apache-nifi, apache-nifi-registry, thingsboard, jenkins...
CVE-2026-22751 vulnerabilities
Vulnerabilities for packages: apache-nifi, apache-nifi-registry, thingsboard, jenkins...
GHSA-X2WQ-9X2F-FHJ7 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins, kafbat-ui, apache-nifi-registry, nacos, kafbat-ui-fips, nacos-docker, thingsboard, camunda, camunda-zeebe...
CVE-2026-22751 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins, kafbat-ui, apache-nifi-registry, nacos, kafbat-ui-fips, nacos-docker, thingsboard, camunda, camunda-zeebe...
GHSA-28JG-CGG7-J4WC vulnerabilities
Vulnerabilities for packages: apache-nifi, debezium-connector-informix, debezium-connector-ibmi, debezium-connector-spanner, debezium...
CVE-2026-33557 vulnerabilities
Vulnerabilities for packages: apache-nifi, debezium-connector-informix, debezium-connector-ibmi, debezium-connector-spanner, debezium...
CVE-2026-33557 vulnerabilities
Vulnerabilities for packages: apache-nifi, debezium-connector-informix, debezium, debezium-connector-ibmi, debezium-connector-spanner...
GHSA-28JG-CGG7-J4WC vulnerabilities
Vulnerabilities for packages: apache-nifi, debezium-connector-informix, debezium, debezium-connector-ibmi, debezium-connector-spanner...
CLEANSTART-2026-KB76878 When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written
Multiple security vulnerabilities affect the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written. See references for individual vulnerability details...
CVE-2026-0636 vulnerabilities
Vulnerabilities for packages: apache-nifi-registry, ruby3.4-bouncy-castle-java, zipkin, apache-pulsar, ruby3.3-bouncy-castle-java, keycloak, jruby, ruby4.0-bouncy-castle-java, gradle, ruby3.2-bouncy-castle-java, kserve-modelmesh, wildfly, logstash, thingsboard, jenkins, apache-nifi, sonarqube,...
CVE-2026-3505 vulnerabilities
Vulnerabilities for packages: apache-nifi, apache-nifi-registry, wildfly, gradle, jenkins...
GHSA-CJ8J-37RH-8475 vulnerabilities
Vulnerabilities for packages: apache-nifi, apache-nifi-registry, wildfly, gradle, jenkins...
GHSA-CJ8J-37RH-8475 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins, wildfly, apache-nifi-registry, gradle...
CVE-2026-3505 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins, wildfly, apache-nifi-registry, gradle...
GHSA-WG6Q-6289-32HP vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, apache-nifi, apache-nifi-registry, wildfly, zipkin, apache-pulsar, sonarqube, keycloak, logstash, thingsboard, druid, jruby, jenkins...
PT-2026-32513
Name of the Vulnerable Software and Affected Versions Apache NiFi affected versions not specified Description The TinkerpopClientService component of the Apache NiFi data processing platform contains access control errors. Specifically, it lacks the required Execute Code permission, which could...
GHSA-2M67-WJPJ-XHG9 vulnerabilities
Vulnerabilities for packages: apache-nifi, jenkins, trino, flyway-fips, apicurio-registry, logstash-fips, keycloak-config-cli, apache-nifi-registry, flyway, camunda, sonarqube, camunda-zeebe, logstash...