https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T17:47:24.151171+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-nifi-2026-68981 BIT-nifi-2026-68981 — Apache NiFi: Uncontrolled Resource Consumption through Decompression of HTTP Requests 2026-10-04T17:47:24.154028+00:00

Affected: Bitnami: nifi

Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted requests that could consume excessive amounts of memory. Upgrading to Apache NiFi 2.11.0 is the recommended mitigation, which relocates response compression to Jetty Server and disables decompression of gzip-encoded HTTP requests.

 https://cve.radiocsirt.org/vuln/euvd-2026-344238 EUVD-2026-344238 2026-10-04T17:47:24.154077+00:00 EUVD-2026-344238 https://cve.radiocsirt.org/vuln/fkie_cve-2026-68981 fkie_cve-2026-68981 2026-10-04T17:47:24.154094+00:00

Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted requests that could consume excessive amounts of memory. Upgrading to Apache NiFi 2.11.0 is the recommended mitigation, which relocates response compression to Jetty Server and disables decompression of gzip-encoded HTTP requests.

 https://cve.radiocsirt.org/vuln/ghsa-w96g-mj2p-wqjv GHSA-w96g-mj2p-wqjv 2026-10-04T17:47:24.154118+00:00

Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted requests that could consume excessive amounts of memory. Upgrading to Apache NiFi 2.11.0 is the recommended mitigation, which relocates response compression to Jetty Server and disables decompression of gzip-encoded HTTP requests.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2639 WID-SEC-W-2026-2639 — Apache Nifi: Mehrere Schwachstellen 2026-10-04T17:47:24.154135+00:00

Ein Angreifer kann mehrere Schwachstellen in Apache Nifi ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder möglicherweise beliebigen Code auszuführen.