93861 matches found
CLEANSTART-2026-PF18370 Apache NiFi 1
Security vulnerability affects the apache-nifi package. Apache NiFi 1...
CLEANSTART-2026-FR51189 Vulnerability in Spring Spring Security
Security vulnerability affects the apache-nifi package. Vulnerability in Spring Spring Security...
CLEANSTART-2026-AQ60759 When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written
Security vulnerability affects the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written...
CLEANSTART-2026-BR90501 non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters)
Security vulnerability affects the apache-nifi package. The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters...
CLEANSTART-2026-PE66600 In Eclipse Jetty, a first HTTP/1
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, a first HTTP/1...
CLEANSTART-2026-HR51503 In Eclipse Jetty, an HTTP URI of this form: /public;/
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, an HTTP URI of this form: /public;/...
CLEANSTART-2026-WX23354 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...
CLEANSTART-2026-AM26944 In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable...
CLEANSTART-2026-GI93885 In Eclipse Jetty, the HTTP/1
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, the HTTP/1...
CLEANSTART-2026-WE49283 Apache NiFi 1
Security vulnerability affects the apache-nifi package. Apache NiFi 1...
CLEANSTART-2026-GS83780 In Eclipse Jetty, versions 12
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions 12...
CLEANSTART-2026-HF44570 Critical XXE in Apache Tika tika-core (1
Security vulnerability affects the apache-nifi package. Critical XXE in Apache Tika tika-core 1...
CLEANSTART-2026-EJ17153 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs
Security vulnerability affects the apache-nifi package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...
CLEANSTART-2026-KF94035 Out-of-bounds memory operations in org
Security vulnerability affects the apache-nifi package. Out-of-bounds memory operations in org...
CLEANSTART-2026-VN01735 In Jakarta Mail versions prior to 2
Security vulnerability affects the apache-nifi package. In Jakarta Mail versions prior to 2...
CLEANSTART-2026-TW91822 In Eclipse Jetty, versions <=9
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions =9...
CLEANSTART-2026-GN63905 In jose4j before 0
Security vulnerability affects the apache-nifi package. In jose4j before 0...
PT-2026-109951
Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...
Apache HTTPD: CVE-2026-79768: Path Equivalence: '/./' (Single Dot Directory)
Path equivalence: '/./' single dot directory vulnerability in Apache HTTP Server's moduserdir module when configured with absolute non-wildcard UserDir directive the 2nd form in https://httpd.apache.org/docs/2.4/mod/moduserdir.htmluserdir This issue affects Apache HTTP Server: from 2.4.0 through...
CVE-2026-59797: Improper Privilege Management
Improper Privilege Management vulnerability in Apache HTTP Server's modssl via SSLRequire and file-related expressions. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...