- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 9 · 2 high, 1 medium, 4 low
- Dependents
- 5
- Registry
- Maven Central
Advisories 9
- CVE-2026-81866Low 0.5
Apache NiFi: Missing Authorization for Assets and Secrets Referenced by Connector Configuration
Affected: from 2.9.0, through 2.11.0.
- CVE-2026-82561Medium 5.9
Apache NiFi: Missing Authorization for Components Referenced in Flow Update Methods
Affected: from 1.5.0, through 2.11.0.
- CVE-2026-86089Low 2.3
Apache NiFi: Missing Process Group Authorization for Connector Migration
Affected: versions 2.11.0.
- CVE-2026-44914High 7.5
Apache NiFi: Missing Authorization of Restricted Permissions when Replacing Flow Contents
Affected: from 1.12.0, through 2.9.0; from 1.12.0, fixed in 2.9.0.
- CVE-2026-44911Low 2.3
Apache NiFi: Incorrect Authorization for Configuration Verification Requests
Affected: from 1.15.0, through 2.9.0; from 1.15.0, fixed in 2.10.0.
- CVE-2026-25903High 8.7
Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates
Affected: from 1.1.0, fixed in 2.8.0.
- CVE-2024-56512Low 2.1
Apache NiFi: Missing Complete Authorization for Parameter and Service References
Affected: from 1.10.0, through 2.0.0; from 1.10.0, fixed in 2.1.0.
- CVE-2019-10083Unrated
When updating a Process Group via the API in NiFi versions 1.3.0 to 1.9.2, the response to the request includes all of its contents (at…
Affected: from 1.3.0, fixed in 1.10.0.
- CVE-2019-12421Unrated
When using an authentication mechanism other than PKI, when the user clicks Log Out in NiFi versions 1.0.0 to 1.9.2, NiFi invalidates the…
Affected: from 1.3.0, fixed in 1.10.0.