org.apache.nifi:nifi-media-nar (>=0.7.0, <=1.4.0), org.apache.nifi:nifi-media-processors (>=0.7.0, <=1.4.0) +16 more potentially affected by CVE-2025-31672 via org.apache.poi:poi-ooxml (3.12-beta1)

org.apache.poi:poi-ooxml MAVEN version 3.12-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.poi:poi-ooxml and may be impacted: - org.apache.nifi:nifi-media-nar =0.7.0, =0.7.0, =2.6.0, =4.4.0.final, =4.4.0.final, =4.4.0.final,...