Vulnerability Database - OSV

GHSA-4wrg-8wpc-h923

Maven/org.springframework.security:spring-security-config

Spring Security Doesn't Correctly Include Servlet Path in Path Matching of HttpSecurity#securityMatchers 22 Apr

Fix available
Severity - 7.5 (High)

CLEANSTART-2026-QI62351

CleanStart/apache-nifi-registry

Security fix for ghsa-4wrg-8wpc-h923 applied in: apache-nifi-registry 2.9.0-r1 yesterday

Fix available

MINI-rrgh-qch9-6rcg

MinimOS/apache-nifi-registry
MinimOS/apache-nifi-registry-toolkit

See record for full details 30 Apr

Fix available

MINI-54vr-rjwv-3j29

MinimOS/apache-nifi

See record for full details 30 Apr

Fix available

CGA-p54x-h388-2689

Chainguard/apache-nifi-registry
Wolfi/apache-nifi-registry

See record for full details 30 Apr

Fix available
Severity - 7.5 (High)

CGA-pw77-cpg5-wfhg

Chainguard/camunda-zeebe-8.9

See record for full details 30 Apr

Fix available
Severity - 7.5 (High)

CGA-hfq7-w2cj-p8v3

Chainguard/apache-nifi
Wolfi/apache-nifi

See record for full details 30 Apr

Fix available
Severity - 7.5 (High)

CGA-x93g-pp8v-q4v5

Chainguard/apache-nifi
Wolfi/apache-nifi

See record for full details 30 Apr

Fix available
Severity - 7.5 (High)

CGA-gh8f-jjw8-g52r

Chainguard/apache-nifi-registry
Wolfi/apache-nifi-registry

See record for full details 30 Apr

Fix available
Severity - 7.5 (High)

CVE-2026-22753

github.com/spring-projects/spring-security

Servlet Path Not Correctly Included in Path Matching of HttpSecurity#securityMatchers 22 Apr

Fix available
Severity - 7.5 (High)