Apache Nifi Registry (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-16. Vendor: Apache Software Foundation.

CVEs of Apache Nifi Registry

• CVE-2026-87976 - CVSS 8.1 (high), 2026-09-16: Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version…
• CVE-2022-33140 - CVSS 8.8 (high), 2022-06-15: The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group…