Skip to content
OpenAdvisories

Package · Wolfi

apache-nifi-toolkit

41 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2024-52046 EPSS 25%

    Apache MINA: MINA applications using unbounded deserialization may allow RCE

    The ObjectSerializationDecoder in Apache MINA uses Java’s native deserialization protocol to process incoming serialized data but lacks the necessary security checks and defenses. This vulnerability allows attackers to exploit the deserialization process by s…

    Apache Software Foundation Apache MINA apache-nifi apache-nifi-toolkit Debian Ubuntu Wolfi Maven
  • Critical 9.1
    CVE-2024-38821 Public exploit

    Authorization Bypass of Static Resources in WebFlux Applications

    Spring WebFlux applications that have Spring Security authorization rules on static resources can be bypassed under certain circumstances. For this to impact an application, all of the following must be true: * It must be a WebFlux application * It must be us…

    Spring Spring thingsboard-tb-node thingsboard-tb-mqtt-transport Wolfi Maven
  • Critical 9.2
    CVE-2024-47561

    Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)

    Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.

    Apache Software Foundation Apache Avro Java SDK druid trino Wolfi Maven