91722 matches found
PT-2026-117859
Security vulnerability affects the apache-nifi package. The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics...
CVE-2026-103501: Heap-based Buffer Overflow
Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8...
PT-2026-117840
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable...
PT-2026-117846
Security vulnerability affects the apache-nifi package. ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java...
PT-2026-117755
Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
PT-2026-117775
Security vulnerability affects the apache-nifi package. Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution...
PT-2026-117847
Security vulnerability affects the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written...
CVE-2026-103636: Out-of-bounds Read
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
CVE-2026-103513: Out-of-bounds Write
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...
PT-2026-117778
Security vulnerability affects the apache-nifi package. JLine is a Java library for handling console input...
PT-2026-117730
Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...
PT-2026-117854
Security vulnerability affects the apache-nifi package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...
PT-2026-117719
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, an HTTP URI of this form: /public;/...
PT-2026-117733
Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CVE-2026-103635: Out-of-bounds Read
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
PT-2026-117794
Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...
PT-2026-117741
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, a first HTTP/1...
PT-2026-117799
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions 12...