92087 matches found
CLEANSTART-2026-JU98285 Uncontrolled Recursion vulnerability in Apache Commons
Security vulnerability affects the apache-nifi package. Uncontrolled Recursion vulnerability in Apache Commons...
CLEANSTART-2026-UQ61824 ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java
Security vulnerability affects the apache-nifi package. ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java...
CLEANSTART-2026-UC89938 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite
Security vulnerability affects the apache-nifi package. Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Calcite...
CLEANSTART-2026-LP47495 Improper escaping of database table names in the CaptureChangeMySQL Processor included with Apache NiFi 1
Security vulnerability affects the apache-nifi package. Improper escaping of database table names in the CaptureChangeMySQL Processor included with Apache NiFi 1...
CLEANSTART-2026-BL56844 fix for CVE-2026-41635 was not applied to the 2
Security vulnerability affects the apache-nifi package. The fix for CVE-2026-41635 was not applied to the 2...
CLEANSTART-2026-JZ19547 Apache NiFi 1
Security vulnerability affects the apache-nifi package. Apache NiFi 1...
CLEANSTART-2026-OT47585 Authorization handling for component configuration verification requests in Apache NiFi 1
Security vulnerability affects the apache-nifi package. Authorization handling for component configuration verification requests in Apache NiFi 1...
CLEANSTART-2026-QE04836 vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker t...
Security vulnerability affects the apache-nifi package. A vulnerability in Spring Expression Language SpEL evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker to invoke unintended application logic...
CLEANSTART-2026-YI69310 fix for CVE-2026-41409 was not applied to the 2
Security vulnerability affects the apache-nifi package. The fix for CVE-2026-41409 was not applied to the 2...
CLEANSTART-2026-DC52993 Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery (SSRF) attack
Security vulnerability affects the apache-nifi package. Due to incorrect host parsing, applications that rely on UriComponentsBuilder to parse and validate an externally provided URL string may be exposed to a server-side request forgery SSRF attack...
CLEANSTART-2026-QF25549 In an untrusted JMS environment, org
Security vulnerability affects the apache-nifi package. In an untrusted JMS environment, org...
CLEANSTART-2026-CX77611 Applications that evaluate user-supplied Spring Expression Language (SpEL) expressions are vulnerable to an Algorithmic Denial of Service (DoS)
Security vulnerability affects the apache-nifi package. Applications that evaluate user-supplied Spring Expression Language SpEL expressions are vulnerable to an Algorithmic Denial of Service DoS...
CLEANSTART-2026-BV52304 Applications may be vulnerable to a Regular Expression Denial of Service (ReDoS) attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to one of the follo...
Security vulnerability affects the apache-nifi package. Applications may be vulnerable to a Regular Expression Denial of Service ReDoS attack if an attacker is able to provide a pattern which is then directly or indirectly supplied to one of the following methods in AntPathMatcher: matchString...
CLEANSTART-2026-VJ67556 Spring Data Commons contains a vulnerability that can lead to a Denial of Service (DoS) condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPaylo...
Security vulnerability affects the apache-nifi package. Spring Data Commons contains a vulnerability that can lead to a Denial of Service DoS condition if Spring Data Web Support is enabled in conjunction with a Controller method using @ProjectedPayload, when an attacker sends a specially crafted...
CLEANSTART-2026-BK96216 Applications which accept user-supplied Spring Expression Language (SpEL) expressions may be vulnerable to a Denial of Service (DoS) attack if the evaluation of a SpEL expression triggers unbounded...
Security vulnerability affects the apache-nifi package. Applications which accept user-supplied Spring Expression Language SpEL expressions may be vulnerable to a Denial of Service DoS attack if the evaluation of a SpEL expression triggers unbounded cache growth...
CLEANSTART-2026-GC79065 Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests
Security vulnerability affects the apache-nifi package. Spring Data's internal property-lookup cache accepts and permanently retains attacker-supplied strings as cache keys, allowing heap exhaustion through repeated requests...
CLEANSTART-2026-BI57203 SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator
Security vulnerability affects the apache-nifi package. A SpEL Injection vulnerability exists in the Spring Data KeyValue if unsanitized user input is passed as Sort into a repository query method that delegates evaluation to the SpelPropertyComparator...
CLEANSTART-2026-PG68728 Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters
Security vulnerability affects the apache-nifi package. Applications using Spring Data Commons may be vulnerable to a Denial of Service DoS attack leading to a StackOverflowException when parsing Sort parameters...
CLEANSTART-2026-XE09130 Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination aft...
Security vulnerability affects the apache-nifi package. Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login...