org.apache.nifi:nifi-toolkit-api (>=2.9.0, <=2.11.0) potentially affected by CVE-2026-81866 via org.apache.nifi:nifi-web-api (>=2.9.0, <=2.11.0)

org.apache.nifi:nifi-web-api MAVEN version =2.9.0, =2.9.0, =2.11.0 Source cves: CVE-2026-81866 Source advisory: MEND:CVE-2026-81866...

org.apache.nifi:nifi-framework-nar (>=1.5.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.5.0, <=1.15.3) +3 more potentially affected by CVE-2026-82561 via org.apache.nifi:nifi-web-api (>=1.5.0, <=2.11.0)

org.apache.nifi:nifi-web-api MAVEN version =1.5.0, =1.5.0, =1.5.0, =1.13.0, =1.11.0, =1.10.0, =2.11.0 Source cves: CVE-2026-82561 Source advisory: MEND:CVE-2026-82561...

org.apache.nifi:nifi-toolkit-api (2.11.0) potentially affected by CVE-2026-86089 via org.apache.nifi:nifi-web-api (2.11.0)

org.apache.nifi:nifi-web-api MAVEN version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-web-api and may be impacted: - org.apache.nifi:nifi-toolkit-api 2.11.0 Source cves: CVE-2026-86089 Source advisory: MEND:CVE-2026-860...

org.apache.nifi:nifi-framework-nar (>=1.5.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.5.0, <=1.15.3) +3 more potentially affected by CVE-2026-68981 via org.apache.nifi:nifi-web-api (>=1.5.0, <=2.10.0)

org.apache.nifi:nifi-web-api MAVEN version =1.5.0, =1.5.0, =1.5.0, =1.13.0, =1.11.0, =1.10.0, =2.10.0 Source cves: CVE-2026-68981 Source advisory: MEND:CVE-2026-68981...

org.apache.nifi:nifi-server-nar (2.0.0), org.apache.nifi:nifi-system-test-suite (2.0.0) +1 more potentially affected by CVE-2026-68980 via org.apache.nifi:nifi-web-api (>=2.0.0, <=2.10.0)

org.apache.nifi:nifi-web-api MAVEN version =2.0.0, =2.0.0, =2.10.0 Source cves: CVE-2026-68980 Source advisory: MEND:CVE-2026-68980...

org.apache.nifi:nifi-framework-nar (>=1.10.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.10.0, <=1.15.3) +3 more potentially affected by CVE-2026-62354 via org.apache.nifi:nifi-web-api (>=1.10.0, <=2.10.0)

org.apache.nifi:nifi-web-api MAVEN version =1.10.0, =1.10.0, =1.10.0, =1.13.0, =1.11.0, =1.10.0, =2.10.0 Source cves: CVE-2026-62354 Source advisory: MEND:CVE-2026-62354...

org.apache.nifi:nifi-framework-nar (>=1.10.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.10.0, <=1.15.3) +3 more potentially affected by CVE-2026-68979 via org.apache.nifi:nifi-web-api (>=1.10.0, <=2.10.0)

org.apache.nifi:nifi-web-api MAVEN version =1.10.0, =1.10.0, =1.10.0, =1.13.0, =1.11.0, =1.10.0, =2.10.0 Source cves: CVE-2026-68979 Source advisory: MEND:CVE-2026-68979...

org.apache.nifi:nifi-framework-nar (>=1.12.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.12.0, <=1.15.3) +3 more potentially affected by CVE-2026-44914 via org.apache.nifi:nifi-web-api (>=1.12.0, <=2.8.0)

org.apache.nifi:nifi-web-api MAVEN version =1.12.0, =1.12.0, =1.12.0, =1.13.0, =1.12.0, =1.12.0, =2.8.0 Source cves: CVE-2026-44914 Source advisory: GHSA-R2G5-993Q-664G...

org.apache.nifi:nifi-jetty (>=1.15.0, <=1.15.3), org.apache.nifi:nifi-server-nar (>=1.15.0, <=2.0.0) +2 more potentially affected by CVE-2026-44911 via org.apache.nifi:nifi-web-api (>=1.15.0, <=2.9.0)

org.apache.nifi:nifi-web-api MAVEN version =1.15.0, =1.15.0, =1.15.0, =1.15.0, =1.15.0, =2.9.0 Source cves: CVE-2026-44911 Source advisory: GHSA-QVJ8-GWPM-4X49...

org.apache.nifi:nifi-framework-nar (>=1.12.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.12.0, <=1.15.3) +3 more potentially affected by CVE-2026-44914 via org.apache.nifi:nifi-web-api (>=1.12.0, <=2.8.0)

org.apache.nifi:nifi-web-api MAVEN version =1.12.0, =1.12.0, =1.12.0, =1.13.0, =1.12.0, =1.12.0, =2.8.0 Source cves: CVE-2026-44914 Source advisory: OSV:GHSA-R2G5-993Q-664G...

org.apache.nifi:nifi-jetty (>=1.15.0, <=1.15.3), org.apache.nifi:nifi-server-nar (>=1.15.0, <=2.0.0) +2 more potentially affected by CVE-2026-44911 via org.apache.nifi:nifi-web-api (>=1.15.0, <=2.9.0)

org.apache.nifi:nifi-web-api MAVEN version =1.15.0, =1.15.0, =1.15.0, =1.15.0, =1.15.0, =2.9.0 Source cves: CVE-2026-44911 Source advisory: OSV:GHSA-QVJ8-GWPM-4X49...

org.apache.nifi:nifi-server-nar (>=2.0.0-m3, <=2.0.0), org.apache.nifi:nifi-system-test-suite (>=2.0.0-m1, <=2.0.0) +1 more potentially affected by CVE-2026-44911 via org.apache.nifi:nifi-web-api (>=2.0.0-m1, <=2.9.0)

org.apache.nifi:nifi-web-api MAVEN version =2.0.0-m1, =2.0.0-m3, =2.0.0-m1, =2.0.0-m1, =2.9.0 Source cves: CVE-2026-44911 Source advisory: SNYK:JAVA-ORGAPACHENIFI-17875420...

org.apache.nifi:nifi-server-nar (>=2.0.0-m3, <=2.0.0), org.apache.nifi:nifi-system-test-suite (>=2.0.0-m1, <=2.0.0) +1 more potentially affected by CVE-2026-44914 via org.apache.nifi:nifi-web-api (>=2.0.0-m1, <=2.9.0)

org.apache.nifi:nifi-web-api MAVEN version =2.0.0-m1, =2.0.0-m3, =2.0.0-m1, =2.0.0-m1, =2.9.0 Source cves: CVE-2026-44914 Source advisory: SNYK:JAVA-ORGAPACHENIFI-17875413...

Missing Authorization

Overview org.apache.nifi:nifi-web-api is a system to process and distribute data. Affected versions of this package are vulnerable to Missing Authorization when replacing Process Groups containing components marked with the Restricted annotation. An attacker can gain unauthorized access to...

org.apache.nifi:nifi-framework-nar (>=1.12.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.12.0, <=1.15.3) +3 more potentially affected by CVE-2026-44914 via org.apache.nifi:nifi-web-api (>=1.12.0, <=2.9.0)

org.apache.nifi:nifi-web-api MAVEN version =1.12.0, =1.12.0, =1.12.0, =1.13.0, =1.12.0, =1.12.0, =2.9.0 Source cves: CVE-2026-44914 Source advisory: MEND:CVE-2026-44914...

org.apache.nifi:nifi-jetty (>=1.15.0, <=1.15.3), org.apache.nifi:nifi-server-nar (>=1.15.0, <=2.0.0) +2 more potentially affected by CVE-2026-44911 via org.apache.nifi:nifi-web-api (>=1.15.0, <=2.9.0)

org.apache.nifi:nifi-web-api MAVEN version =1.15.0, =1.15.0, =1.15.0, =1.15.0, =1.15.0, =2.9.0 Source cves: CVE-2026-44911 Source advisory: MEND:CVE-2026-44911...

org.apache.nifi:nifi-framework-nar (>=1.1.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.1.0, <=1.15.3) +3 more potentially affected by CVE-2026-25903 via org.apache.nifi:nifi-web-api (>=1.1.0, <=2.7.2)

org.apache.nifi:nifi-web-api MAVEN version =1.1.0, =1.1.0, =1.1.0, =1.13.0, =1.11.0, =1.10.0, =2.7.2 Source cves: CVE-2026-25903 Source advisory: GHSA-C5W7-M8WF-XC77...

org.apache.nifi:nifi-framework-nar (>=1.1.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.1.0, <=1.15.3) +3 more potentially affected by CVE-2026-25903 via org.apache.nifi:nifi-web-api (>=1.1.0, <=2.7.2)

org.apache.nifi:nifi-web-api MAVEN version =1.1.0, =1.1.0, =1.1.0, =1.13.0, =1.11.0, =1.10.0, =2.7.2 Source cves: CVE-2026-25903 Source advisory: OSV:GHSA-C5W7-M8WF-XC77...

org.apache.nifi:nifi-framework-nar (>=1.1.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.1.0, <=1.15.3) +3 more potentially affected by CVE-2026-25903 via org.apache.nifi:nifi-web-api (>=1.1.0, <=2.7.2)

org.apache.nifi:nifi-web-api MAVEN version =1.1.0, =1.1.0, =1.1.0, =1.13.0, =1.11.0, =1.10.0, =2.7.2 Source cves: CVE-2026-25903 Source advisory: SNYK:JAVA-ORGAPACHENIFI-15304459...

org.apache.nifi:nifi-framework-nar (>=1.1.0, <=1.12.1), org.apache.nifi:nifi-jetty (>=1.1.0, <=1.15.3) +3 more potentially affected by CVE-2026-25903 via org.apache.nifi:nifi-web-api (>=1.1.0, <=2.7.2)

org.apache.nifi:nifi-web-api MAVEN version =1.1.0, =1.1.0, =1.1.0, =1.13.0, =1.11.0, =1.10.0, =2.7.2 Source cves: CVE-2026-25903 Source advisory: MEND:CVE-2026-25903...