https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:56:21.155997+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-02796 bdu:2025-02796 2026-10-06T06:56:21.161461+00:00 bdu:2025-02796 https://cve.radiocsirt.org/vuln/euvd-2026-222231 EUVD-2026-222231 2026-10-06T06:56:21.161507+00:00 EUVD-2026-222231 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27017 fkie_cve-2025-27017 2026-10-06T06:56:21.161529+00:00

Apache NiFi 1.13.0 through 2.2.0 includes the username and password used to authenticate with MongoDB in the NiFi provenance events that MongoDB components generate during processing. An authorized user with read access to the provenance events of those processors may see the credentials information. Upgrading to Apache NiFi 2.3.0 is the recommended mitigation, which removes the credentials from provenance event records.

 https://cve.radiocsirt.org/vuln/ghsa-35gq-cvrm-xf94 GHSA-35gq-cvrm-xf94 — Apache NiFi: Potential Insertion of MongoDB Password in Provenance Record 2026-10-06T06:56:21.161584+00:00

Affected: Maven: org.apache.nifi:nifi-mongodb-services

Apache NiFi 1.13.0 through 2.2.0 includes the username and password used to authenticate with MongoDB in the NiFi provenance events that MongoDB components generate during processing. An authorized user with read access to the provenance events of those processors may see the credentials information. Upgrading to Apache NiFi 2.3.0 is the recommended mitigation, which removes the credentials from provenance event records.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0526 WID-SEC-W-2025-0526 — Apache Nifi: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-06T06:56:21.161623+00:00

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Nifi ausnutzen, um Informationen offenzulegen.