GHSA-MQ64-J8F9-9GCJ vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, kafbat-ui-fips, apache-activemq, apache-nifi-registry, camunda-zeebe, kafbat-ui, camunda...

GHSA-WXPP-56Q6-5PCG vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, kafbat-ui-fips, zipkin, apache-activemq, apache-nifi-registry, keycloak-config-cli, apache-camel-karavan-devmode, camunda-zeebe, kafbat-ui, camunda, jenkins...

CVE-2026-41841 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, kafbat-ui-fips, apache-activemq, apache-nifi-registry, camunda-zeebe, kafbat-ui, camunda...

CVE-2026-41843 vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, kafbat-ui-fips, apache-activemq, apache-nifi-registry, camunda-zeebe, kafbat-ui, camunda...

GHSA-72PG-X5F8-J25J vulnerabilities

Vulnerabilities for packages: apache-activemq-fips, kafbat-ui-fips, apache-activemq, apache-nifi-registry, camunda-zeebe, kafbat-ui, camunda...

CLEANSTART-2026-SP51719 Security fixes in apache-nifi 2.7.2-r7

Package apache-nifi version 2.7.2-r7 fixes 13 vulnerabilities: CVE-2024-29371, CVE-2025-14763, CVE-2025-67721, CVE-2026-22746, CVE-2026-22748...

CLEANSTART-2026-OD16779 Security fixes in apache-nifi 2.9.0-r3

Package apache-nifi version 2.9.0-r3 fixes 55 vulnerabilities: CVE-2024-45993, CVE-2025-31344, CVE-2025-67721, CVE-2025-8671, CVE-2026-10532...

CLEANSTART-2026-HO81161 Security fixes in apache-nifi 2.8.0-r0

Package apache-nifi version 2.8.0-r0 fixes 4 vulnerabilities: ghsa-x2wq-9x2f-fhj7, ghsa-72hv-8253-57qq, ghsa-6v53-7c9g-w56r, ghsa-2m67-wjpj-xhg9...

CLEANSTART-2026-ZG52936 Security fixes in apache-nifi 2.10.0-r1

Package apache-nifi version 2.10.0-r1 fixes 31 vulnerabilities: ghsa-x4gw-5cx5-pgmh, ghsa-3qp7-7mw8-wx86, ghsa-f6hv-jmp6-3vwv, ghsa-c2gf-v879-257j, ghsa-cm33-6792-r9fm...

CLEANSTART-2026-BQ50387 Security fixes in apache-nifi 2.6.0-r3

Package apache-nifi version 2.6.0-r3 fixes 51 vulnerabilities: CVE-2024-29371, CVE-2024-45993, CVE-2025-8671, CVE-2025-11143, CVE-2025-31344...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: apache-pulsar, zookeeper, druid, kafka, tez, apache-nifi, confluent-kafka...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: apache-pulsar, zookeeper, druid, kafka, tez, apache-nifi, confluent-kafka...

GHSA-V3PR-HXPR-MFM8 vulnerabilities

Vulnerabilities for packages: guacamole-client, apache-nifi, hadoop-fips, jenkins...

CVE-2026-47065 vulnerabilities

Vulnerabilities for packages: guacamole-client, apache-nifi, hadoop-fips, jenkins...

CVE-2026-47065 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

GHSA-V3PR-HXPR-MFM8 vulnerabilities

Vulnerabilities for packages: jenkins, apache-nifi...

BIT-NIFI-2026-54665 Apache NiFi: Missing Validation for Proxy Host Headers

Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standard Host header without validating the values provided. Apache NiFi 1.6.0 introduced a configurable application property to restrict values provided in...

BIT-NIFI-2026-44911 Apache NiFi: Incorrect Authorization for Configuration Verification Requests

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...

CVE-2026-54665

Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standard Host header without validating the values provided. Apache NiFi 1.6.0 introduced a configurable application property to restrict values provided in...

CVE-2026-44911

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...