CVE-2026-41843 vulnerabilities

Vulnerabilities for packages: apache-activemq, camunda, camunda-zeebe, kafbat-ui-fips, kafbat-ui, apache-nifi-registry, apache-activemq-fips...

CLEANSTART-2026-SP51719 Security fixes in apache-nifi 2.7.2-r7

Package apache-nifi version 2.7.2-r7 fixes 13 vulnerabilities: CVE-2024-29371, CVE-2025-14763, CVE-2025-67721, CVE-2026-22746, CVE-2026-22748...

CLEANSTART-2026-HO81161 Security fixes in apache-nifi 2.8.0-r0

Package apache-nifi version 2.8.0-r0 fixes 4 vulnerabilities: ghsa-x2wq-9x2f-fhj7, ghsa-72hv-8253-57qq, ghsa-6v53-7c9g-w56r, ghsa-2m67-wjpj-xhg9...

CLEANSTART-2026-ZG52936 Security fixes in apache-nifi 2.10.0-r1

Package apache-nifi version 2.10.0-r1 fixes 31 vulnerabilities: ghsa-x4gw-5cx5-pgmh, ghsa-3qp7-7mw8-wx86, ghsa-f6hv-jmp6-3vwv, ghsa-c2gf-v879-257j, ghsa-cm33-6792-r9fm...

CLEANSTART-2026-BQ50387 Security fixes in apache-nifi 2.6.0-r3

Package apache-nifi version 2.6.0-r3 fixes 51 vulnerabilities: CVE-2024-29371, CVE-2024-45993, CVE-2025-8671, CVE-2025-11143, CVE-2025-31344...

CLEANSTART-2026-OD16779 Security fixes in apache-nifi 2.9.0-r3

Package apache-nifi version 2.9.0-r3 fixes 55 vulnerabilities: CVE-2024-45993, CVE-2025-31344, CVE-2025-67721, CVE-2025-8671, CVE-2026-10532...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: zookeeper-fips, pinot-fips, spark-kubernetes-operator-fips, confluent-kafka, kafka, hadoop-fips, spark-fips, tez, apache-camel-karavan-devmode, apache-hop-fips, apache-pulsar, apache-nifi, confluent-kafka-jre-bcfips, hadoop-client-modules, kafka-fips, pinot, zookeepe...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: zookeeper-fips, pinot-fips, spark-kubernetes-operator-fips, confluent-kafka, kafka, hadoop-fips, spark-fips, tez, apache-camel-karavan-devmode, apache-hop-fips, apache-pulsar, apache-nifi, confluent-kafka-jre-bcfips, hadoop-client-modules, kafka-fips, pinot, zookeepe...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: zookeeper, confluent-kafka, apache-pulsar, tez, apache-nifi, kafka, druid...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: zookeeper, confluent-kafka, apache-pulsar, tez, apache-nifi, kafka, druid...

CVE-2026-47065 vulnerabilities

Vulnerabilities for packages: jenkins, hadoop-fips, apache-nifi, guacamole-client...

GHSA-V3PR-HXPR-MFM8 vulnerabilities

Vulnerabilities for packages: jenkins, hadoop-fips, apache-nifi, guacamole-client...

CVE-2026-47065 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins...

GHSA-V3PR-HXPR-MFM8 vulnerabilities

Vulnerabilities for packages: apache-nifi, jenkins...

BIT-NIFI-2026-54665 Apache NiFi: Missing Validation for Proxy Host Headers

Apache NiFi 0.0.1 through 2.9.0 support building qualified URLs from one of several HTTP request headers that provide an alternative to the standard Host header without validating the values provided. Apache NiFi 1.6.0 introduced a configurable application property to restrict values provided in...

BIT-NIFI-2026-44914 Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow Contents

Apache NiFi 1.12.0 through 2.9.0 are missing authorization when replacing Process Groups that include extension components with specific Required Permissions based on the Restricted annotation. The Restricted annotation indicates additional privileges required, but framework authorization did not...

BIT-NIFI-2026-44911 Apache NiFi: Incorrect Authorization for Configuration Verification Requests

Authorization handling for component configuration verification requests in Apache NiFi 1.15.0 through 2.9.0 allows clients with read access to submit proposed configuration properties. The proposed properties override current configuration, enabling users with read access to invoke predefined...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization when replacing Process Groups containing components marked with the Restricted annotation. An attacker can gain unauthorized access to restricted components by submitting requests to replace Process Groups without...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization when replacing Process Groups containing components marked with the Restricted annotation. An attacker can gain unauthorized access to restricted components by submitting requests to replace Process Groups without...

Missing Authorization

Overview org.apache.nifi:nifi-web-api is a system to process and distribute data. Affected versions of this package are vulnerable to Missing Authorization when replacing Process Groups containing components marked with the Restricted annotation. An attacker can gain unauthorized access to...