91719 matches found
PT-2026-117775
Security vulnerability affects the apache-nifi package. Spring Data Commons applications may be vulnerable to denial of service through resource exhaustion when attacker-controlled property path strings are passed to MappingContext property path resolution...
PT-2026-117847
Security vulnerability affects the apache-nifi package. When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written...
CVE-2026-103636: Out-of-bounds Read
Out-of-bounds read in the VarOpt union deserialization of Apache DataSketches C++ repo: datasketches-cpp. varoptunion::deserialize read the 32-byte preamble of a non-empty union after checking that only 8 bytes were available, so a truncated serialized union could cause a read of up to 24 bytes...
CVE-2026-103513: Out-of-bounds Write
Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...
PT-2026-117778
Security vulnerability affects the apache-nifi package. JLine is a Java library for handling console input...
PT-2026-117730
Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...
PT-2026-117854
Security vulnerability affects the apache-nifi package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...
PT-2026-117719
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, an HTTP URI of this form: /public;/...
PT-2026-117733
Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CVE-2026-103635: Out-of-bounds Read
Out-of-bounds read in the compact Theta sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. compactthetasketch::deserialize and wrappedcompactthetasketch::wrap read header fields before checking that the input was long enough. For the compressed format, the size check could ...
PT-2026-117794
Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...
PT-2026-117741
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, a first HTTP/1...
PT-2026-117799
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions 12...
PT-2026-117839
Security vulnerability affects the apache-nifi package. JLine is a Java library for handling console input...
PT-2026-117712
Security vulnerability affects the apache-nifi package. JLine is a Java library for handling console input...
PT-2026-117814
Security vulnerability affects the apache-nifi package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...
PT-2026-117830
Security vulnerability affects the apache-nifi package. In an untrusted JMS environment, org...
PT-2026-117755
Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
PT-2026-117923
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...
PT-2026-117918
Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...