Vulnerability Database - OSV

GHSA-4vrc-j85c-598c

Maven/org.springframework.security:spring-security-config

Spring Security Doesn't Correctly Include Servlet Path in Path Matching of XML Authorization Rules 22 Apr

Fix available
Severity - 7.5 (High)

CLEANSTART-2026-LA97257

CleanStart/apache-nifi-registry

Security fix for ghsa-4vrc-j85c-598c applied in: apache-nifi-registry 2.9.0-r1 yesterday

Fix available

MINI-rx4r-jpr3-9w37

MinimOS/apache-nifi-registry
MinimOS/apache-nifi-registry-toolkit

See record for full details 30 Apr

Fix available

MINI-24qv-8ppc-93fj

MinimOS/apache-nifi

See record for full details 30 Apr

Fix available

CGA-2vrx-pg2x-69p9

Chainguard/apache-nifi-registry
Wolfi/apache-nifi-registry

See record for full details 30 Apr

Fix available
Severity - 7.5 (High)

CGA-hff8-pjpx-2c54

Chainguard/camunda-zeebe-8.9

See record for full details 30 Apr

Fix available
Severity - 7.5 (High)

CGA-cqp2-3rf8-h2hj

Chainguard/apache-nifi
Wolfi/apache-nifi

See record for full details 30 Apr

Fix available
Severity - 7.5 (High)

CGA-22cm-p32v-7jv5

Chainguard/apache-nifi
Wolfi/apache-nifi

See record for full details 30 Apr

Fix available
Severity - 7.5 (High)

CGA-57jm-46qh-5crj

Chainguard/apache-nifi-registry
Wolfi/apache-nifi-registry

See record for full details 30 Apr

Fix available
Severity - 7.5 (High)

CVE-2026-22754

github.com/spring-projects/spring-security

ervlet Path Not Correctly Included in Path Matching of XML Authorization Rules 22 Apr

Fix available
Severity - 7.5 (High)