https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T12:52:22.986403+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-03754 cnvd-2018-03754 2026-10-19T12:52:22.989828+00:00 cnvd-2018-03754 https://cve.radiocsirt.org/vuln/euvd-2026-170923 EUVD-2026-170923 2026-10-19T12:52:22.989859+00:00 EUVD-2026-170923 https://cve.radiocsirt.org/vuln/fkie_cve-2017-12632 fkie_cve-2017-12632 2026-10-19T12:52:22.989873+00:00

A malicious host header in an incoming HTTP request could cause NiFi to load resources from an external server. The fix to sanitize host headers and compare to a controlled whitelist was applied on the Apache NiFi 1.5.0 release. Users running a prior 1.x release should upgrade to the appropriate release.

 https://cve.radiocsirt.org/vuln/ghsa-w4x6-j349-9r57 GHSA-w4x6-j349-9r57 — Apache NiFi host header poisoning issue 2026-10-19T12:52:22.989901+00:00

Affected: Maven: org.apache.nifi:nifi

A malicious host header in an incoming HTTP request could cause NiFi to load resources from an external server. The fix to sanitize host headers and compare to a controlled whitelist was applied on the Apache NiFi 1.5.0 release. Users running a prior 1.x release should upgrade to the appropriate release.

 https://cve.radiocsirt.org/vuln/gsd-2017-12632 gsd-2017-12632 2026-10-19T12:52:22.989923+00:00 gsd-2017-12632