be.fluid-it.guice.extensions:guice-multi-shiro-realms (=0.1-1), be.fluid-it.shiro.jee:shiro-jee-authc (>=0.1-1 <=0.1-3) +3101 more potentially affected by CVE-2026-23901 via org.apache.shiro:shiro-core (>=1.0.0-incubating <=2.0.6)

org.apache.shiro:shiro-core MAVEN version =1.0.0-incubating, =0.1-1, =4.0.0-RC2, =1.0.0, =1.0.0, =0.0.2, =0.0.21, =0.0.27, =0.0.2, =0.0.27, =0.0.1, =1.0.2, =1.0.0, =1.0.5 and more Source cves: CVE-2026-23901 Source advisory: OSV:GHSA-C4QC-4Q9P-M9Q9...

be.fluid-it.guice.extensions:guice-multi-shiro-realms (=0.1-1), be.fluid-it.shiro.jee:shiro-jee-authc (>=0.1-1 <=0.1-3) +2724 more potentially affected by CVE-2020-1957 via org.apache.shiro:shiro-core (>=1.0.0-incubating <=1.5.1)

org.apache.shiro:shiro-core MAVEN version =1.0.0-incubating, =0.1-1, =4.0.0-RC2, =1.0.0, =1.0.0, =0.0.2, =0.0.21, =0.0.2, =0.0.1, =1.0.0, =0.1, =0.1, =0.1, =0.2 and more Source cves: CVE-2020-1957 Source advisory: OSV:GHSA-26GR-CVQ3-QXGF...

org.apache.nifi.minifi:minifi-assembly (>=1.14.0 <=1.28.1), org.apache.nifi.minifi:minifi-c2-assembly (>=0.2.0 <=1.28.1) +27 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (>=0.0.1-incubating <=1.4.0)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version =0.0.1-incubating, =1.14.0, =0.2.0, =0.2.0, =0.0.1, =0.0.1, =0.0.1, =1.14.0, =1.14.0, =0.0.1, =0.0.1, =1.0.0, =0.0.1-incubating, =1.0.0, =0.0.1-incubating, =0.0.1-incubating, =1.15.3 and more Source cves: CVE-2017-15703 Source advisory...

Apache Atlas Cross-Site Scripting Vulnerability (CNVD-2017-27441)

Apache Atlas is a set of scalable and extensible core functional governance services from the Apache USA Software Foundation. A cross-site scripting vulnerability exists in Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating. An attacker could exploit this vulnerability to execute arbitra...

CVE-2017-3154

Error responses from Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating included stack trace, exposing excessive information...

CVE-2017-3150

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating use cookies that could be accessible to client-side script...

PYSEC-2017-107

Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Stored Cross-Site Scripting in the edit-tag functionality...