Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CLEANSTART-2026-AV84730
  • CleanStart/apache-nifi
Security fixes for CVE-2026-1605, CVE-2026-22732, CVE-2026-24281, CVE-2026-33870, CVE-2026-33871, CVE-2026-3505, CVE-2026-5588, ghsa-355h-qmc2-wpwf, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-c3fc-8qff-9hwx, ghsa-cj8j-37rh-8475, ghsa-cvc6-q2cp-2xhw, ghsa-qqpg-mvqg-649v, ghsa-vxf7-qj7q-83fh, ghsa-wg6q-6289-32hp, ghsa-x2wq-9x2f-fhj7, ghsa-x44p-gvrj-pj2r applied in versions: 2.7.2-r0, 2.7.2-r2, 2.9.0-r0, 2.9.0-r1 18 May
  • Fix available
CLEANSTART-2026-TK07726
  • CleanStart/apache-nifi
Security fixes for CVE-2026-1605, CVE-2026-22732, CVE-2026-24281, CVE-2026-33870, CVE-2026-33871, CVE-2026-3505, CVE-2026-5588, ghsa-355h-qmc2-wpwf, ghsa-3677-xxcr-wjqv, ghsa-72hv-8253-57qq, ghsa-c3fc-8qff-9hwx, ghsa-cj8j-37rh-8475, ghsa-qqpg-mvqg-649v, ghsa-wg6q-6289-32hp, ghsa-x2wq-9x2f-fhj7, ghsa-x44p-gvrj-pj2r applied in versions: 2.7.2-r0, 2.7.2-r2, 2.7.2-r3, 2.7.2-r4 18 May
  • Fix available
CLEANSTART-2026-DY69070
  • CleanStart/apache-nifi
Security fixes for CVE-2026-1605, CVE-2026-22732, CVE-2026-24281, CVE-2026-33870, CVE-2026-33871, CVE-2026-3505, CVE-2026-5588, ghsa-2m67-wjpj-xhg9, ghsa-3677-xxcr-wjqv, ghsa-6v53-7c9g-w56r, ghsa-72hv-8253-57qq, ghsa-c3fc-8qff-9hwx, ghsa-p93r-85wp-75v3, ghsa-qqpg-mvqg-649v, ghsa-wg6q-6289-32hp, ghsa-x2wq-9x2f-fhj7, ghsa-x44p-gvrj-pj2r applied in versions: 2.6.0-r0, 2.7.2-r0, 2.7.2-r2 18 May
  • Fix available
CLEANSTART-2026-VN28553
  • CleanStart/apache-nifi
Allocation of resources without limits or throttling, Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc 30 Apr
  • Fix available
  • Severity - 9.8 (Critical)
CLEANSTART-2026-GN46454
  • CleanStart/apache-nifi
When applications specify HTTP response headers for servlet applications using Spring Security, there is the possibility that the HTTP Headers will not be written 30 Apr
  • Fix available
  • Severity - 9.8 (Critical)
MINI-7mhr-c75m-pxqm
  • MinimOS/jenkins-2.555
See record for full details 29 Apr
  • Fix available
MINI-vqfr-vwqf-rqpc
  • MinimOS/apache-nifi
  • MinimOS/apache-nifi-compat
  • MinimOS/apache-nifi-toolkit
See record for full details 27 Apr
  • No fix available
MINI-g4g7-2vf3-w3v6
  • MinimOS/kafbat-kafka-ui-fips
  • MinimOS/kafbat-kafka-ui-fips-compat
See record for full details 27 Apr
  • No fix available
MINI-gj2q-69f6-j5vj
  • MinimOS/jenkins-2.541
  • MinimOS/jenkins-2.541-advanced-compat
  • MinimOS/jenkins-2.541-compat
  • MinimOS/jenkins-2.541-entrypoint
  • MinimOS/jenkins-2.541-remoting
See record for full details 27 Apr
  • No fix available
MINI-6hrf-r235-p9mm
  • MinimOS/kafbat-kafka-ui
  • MinimOS/kafbat-kafka-ui-compat
See record for full details 27 Apr
  • No fix available
MINI-2xv4-m347-fr6j
  • MinimOS/apache-nifi-registry
  • MinimOS/apache-nifi-registry-toolkit
See record for full details 27 Apr
  • No fix available
MINI-j566-xwpp-qx3c
  • MinimOS/jenkins
  • MinimOS/jenkins-advanced-compat
  • MinimOS/jenkins-compat
  • MinimOS/jenkins-docker-agent
  • MinimOS/jenkins-remoting
See record for full details 26 Apr
  • Fix available
MINI-fpvw-g2c6-h6rq
  • MinimOS/jenkins-2.528
  • MinimOS/jenkins-2.528-advanced-compat
  • MinimOS/jenkins-2.528-compat
  • MinimOS/jenkins-2.528-entrypoint
  • MinimOS/jenkins-2.528-remoting
See record for full details 26 Apr
  • No fix available
MINI-273p-cjrj-584f
  • MinimOS/jenkins-2.492
  • MinimOS/jenkins-2.492-compat
  • MinimOS/jenkins-2.492-remoting
See record for full details 26 Apr
  • No fix available
MINI-j32r-7rhp-v526
  • MinimOS/jenkins-2.516
  • MinimOS/jenkins-2.516-compat
  • MinimOS/jenkins-2.516-remoting
See record for full details 26 Apr
  • No fix available
MINI-78fm-gjcg-2v2q
  • MinimOS/jenkins-2.504
  • MinimOS/jenkins-2.504-compat
  • MinimOS/jenkins-2.504-remoting
See record for full details 26 Apr
  • No fix available