CGA-q4qq-hchm-2pp2
- Source
- https://images.chainguard.dev/security/CGA-q4qq-hchm-2pp2
- Import Source
- https://advisories.cgr.dev/chainguard/v3/osv/CGA-q4qq-hchm-2pp2.json
- JSON Data
- https://api.osv.dev/v1/vulns/CGA-q4qq-hchm-2pp2
- Upstream
- Published
- 2025-10-30T22:06:46Z
- Modified
- 2026-09-07T01:46:55Z
- Severity
-
- 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2025-41234
- https://github.com/spring-projects/spring-framework/issues/35034
- https://github.com/spring-projects/spring-framework/commit/f0e7b42704e6b33958f242d91bd690d6ef7ada9c
- https://github.com/spring-projects/spring-framework
- https://spring.io/security/cve-2025-41234
Affected packages
Chainguard / apache-nifi-compat
Package
- Name
- apache-nifi-compat
- Purl
- pkg:apk/chainguard/apache-nifi-compat?arch=x86_64
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.4.0-r5
Ecosystem specific
{
"components": [
{
"component_location": "/usr/share/nifi/nifi-current/lib/nifi-framework-nar-2.4.0.nar",
"component_name": "spring-web",
"component_purl": "pkg:maven/spring-web@6.2.7",
"component_type": "java-archive",
"component_version": "6.2.7",
"latest_event_status": "fixed",
"latest_event_timestamp": "2025-06-14T20:13:11Z"
}
]
}
Wolfi / apache-nifi-compat
Package
- Name
- apache-nifi-compat
- Purl
- pkg:apk/wolfi/apache-nifi-compat?arch=x86_64
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed2.4.0-r5
Ecosystem specific
{
"components": [
{
"component_location": "/usr/share/nifi/nifi-current/lib/nifi-framework-nar-2.4.0.nar",
"component_name": "spring-web",
"component_purl": "pkg:maven/spring-web@6.2.7",
"component_type": "java-archive",
"component_version": "6.2.7",
"latest_event_status": "fixed",
"latest_event_timestamp": "2025-06-14T20:13:11Z"
}
]
}