93861 matches found
CLEANSTART-2026-MD90103 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-EK15836 HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va...
Security vulnerability affects the apache-nifi package. HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message...
CLEANSTART-2026-KQ03860 Security fix for GHSA-r7wm-3cxj-wff9 applied in: apache-nifi 2.5.0-r1
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-SJ80754 Apache NiFi 0
Security vulnerability affects the apache-nifi package. Apache NiFi 0...
CLEANSTART-2026-DD70166 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-WH10300 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-XF54528 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-GO38541 Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5
Security vulnerability affects the apache-nifi package. Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5...
CLEANSTART-2026-FR49757 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-ML93784 SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X
Security vulnerability affects the apache-nifi package. SubjectDnX509PrincipalExtractor does not correctly handle certain malformed X...
CLEANSTART-2026-CV55977 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection'), Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component
Security vulnerability affects the apache-nifi package. Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection', Authorization Bypass Through User-Controlled Key vulnerability in Apache Camel Salesforce Component...
CLEANSTART-2026-PR17240 Uncontrolled Resource Consumption vulnerability in the HTTP/1
Security vulnerability affects the apache-nifi package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...
CLEANSTART-2026-KK56976 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...
CLEANSTART-2026-UQ61824 ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java
Security vulnerability affects the apache-nifi package. ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java...
CLEANSTART-2026-JU98285 Uncontrolled Recursion vulnerability in Apache Commons
Security vulnerability affects the apache-nifi package. Uncontrolled Recursion vulnerability in Apache Commons...
CLEANSTART-2026-UC89938 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite
Security vulnerability affects the apache-nifi package. Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Calcite...
CLEANSTART-2026-LP47495 Improper escaping of database table names in the CaptureChangeMySQL Processor included with Apache NiFi 1
Security vulnerability affects the apache-nifi package. Improper escaping of database table names in the CaptureChangeMySQL Processor included with Apache NiFi 1...
CLEANSTART-2026-OT47585 Authorization handling for component configuration verification requests in Apache NiFi 1
Security vulnerability affects the apache-nifi package. Authorization handling for component configuration verification requests in Apache NiFi 1...