Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.nifi:nifi-dbcp-base

2 known vulnerabilities (1 high), with the versions each affects and the releases that fix them.

Latest release
2.12.0 (Sep 10, 2026): no advisory affects it
Newest unaffected release
2.12.0 (Sep 10, 2026), the latest release
Advisories
2 · 1 high
Dependents
10
Releases
33 since 1.19.0 (Nov 23, 2022)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • Apache NiFi: Incomplete Validation of JDBC and JNDI Connection URLs

    Affected: from 1.21.0, fixed in 1.23.1.

    Fixed in 1.23.1 (released Aug 15, 2023, 3 days before disclosure).

    The latest release, 2.12.0, is not affected.

  • Apache NiFi: Potential Code Injection with Database Services using H2

    Affected: from 0.0.2, fixed in 1.22.0.

    Fixed in 1.22.0 (released Jun 6, 2023, 6 days before disclosure).

    The latest release, 2.12.0, is not affected.