https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 06:44:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-02796 bdu:2025-02796 https://cve.radiocsirt.org/vuln/bdu:2025-02796 https://cve.radiocsirt.org/vuln/euvd-2026-222231 EUVD-2026-222231 https://cve.radiocsirt.org/vuln/euvd-2026-222231 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27017 <p>Apache NiFi 1.13.0 through 2.2.0 includes the username and password used to authenticate with MongoDB in the NiFi provenance events that MongoDB components generate during processing. An authorized user with read access to the provenance events of those processors may see the credentials information. Upgrading to Apache NiFi 2.3.0 is the recommended mitigation, which removes the credentials from provenance event records.</p> <p>Apache NiFi 1.13.0 through 2.2.0 includes the username and password used to authenticate with MongoDB in the NiFi provenance events that MongoDB components generate during processing. An authorized user with read access to the provenance events of those processors may see the credentials information. Upgrading to Apache NiFi 2.3.0 is the recommended mitigation, which removes the credentials from provenance event records.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27017 https://cve.radiocsirt.org/vuln/ghsa-35gq-cvrm-xf94 <p><strong>Affected:</strong> Maven: org.apache.nifi:nifi-mongodb-services</p> <p>Apache NiFi 1.13.0 through 2.2.0 includes the username and password used to authenticate with MongoDB in the NiFi provenance events that MongoDB components generate during processing. An authorized user with read access to the provenance events of those processors may see the credentials information. Upgrading to Apache NiFi 2.3.0 is the recommended mitigation, which removes the credentials from provenance event records.</p> <p><strong>Affected:</strong> Maven: org.apache.nifi:nifi-mongodb-services</p> <p>Apache NiFi 1.13.0 through 2.2.0 includes the username and password used to authenticate with MongoDB in the NiFi provenance events that MongoDB components generate during processing. An authorized user with read access to the provenance events of those processors may see the credentials information. Upgrading to Apache NiFi 2.3.0 is the recommended mitigation, which removes the credentials from provenance event records.</p> https://cve.radiocsirt.org/vuln/ghsa-35gq-cvrm-xf94 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0526 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Nifi ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Apache Nifi ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0526