Vulnerability Database - OSV

GHSA-2jrg-rf5x-568g

Maven/org.springframework.security:spring-security-web

Spring Security Vulnerable to Unauthorized User Impersonation when Using X.509 Client Certificates 22 Apr

Fix available
Severity - 6.8 (Medium)

CLEANSTART-2026-QH64443

CleanStart/apache-nifi-registry

Security fix for ghsa-2jrg-rf5x-568g applied in: apache-nifi-registry 2.9.0-r1 yesterday

Fix available

MINI-3xmj-69r2-6r9x

MinimOS/apache-nifi-registry
MinimOS/apache-nifi-registry-toolkit

See record for full details 30 Apr

Fix available

MINI-mmh5-g366-hwv4

MinimOS/apache-nifi

See record for full details 30 Apr

Fix available

MINI-2ww6-rqv3-7mx4

MinimOS/jenkins
MinimOS/jenkins-advanced-compat
MinimOS/jenkins-compat
MinimOS/jenkins-docker-agent
MinimOS/jenkins-remoting

See record for full details 30 Apr

Fix available

CGA-mr6f-w73v-q5vx

Chainguard/apache-nifi-registry
Wolfi/apache-nifi-registry

See record for full details 30 Apr

Fix available
Severity - 6.8 (Medium)

CGA-956p-xf8g-2xgq

Chainguard/camunda-zeebe-8.9

See record for full details 30 Apr

Fix available
Severity - 6.8 (Medium)

CGA-7jf4-4c5r-w732

Chainguard/apache-nifi
Wolfi/apache-nifi

See record for full details 30 Apr

Fix available
Severity - 6.8 (Medium)

CGA-jpjg-82vp-6748

Chainguard/apache-nifi
Wolfi/apache-nifi

See record for full details 30 Apr

Fix available
Severity - 6.8 (Medium)

CGA-hjc4-936c-qxjf

Chainguard/apache-nifi-registry
Wolfi/apache-nifi-registry

See record for full details 30 Apr

Fix available
Severity - 6.8 (Medium)

CVE-2026-22747

github.com/spring-projects/spring-security

Unauthorized User Impersonation when Using X.509 Client Certificates 22 Apr

Fix available
Severity - 6.8 (Medium)