maven package report

Is org.apache.nifi:nifi-security-utils safe?

1 known vulnerability.

cvss

not scored

how bad it is if exploited, out of 10

epss

3.1%

chance of exploitation in the next 30 days

xyz score

not scored

CyberXYZ composite, out of 10

fig. 01 — GHSA-7q8g-gpfp-v8gx, the advisory selected below

// advisories

GHSA-7q8g-gpfp-v8gx

UNKNOWNCVE-2020-1942

In Apache NiFi 0.0.1 to 1.11.0, the flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of both the cluster and local flow was printed, potentially containing sensitive values in plaintext.

Affected: >=0.0.1
Fixed in: 1.12.0-RC1
Weakness: CWE-200
Published: 2022-01-06
Source: github

GHSA NVD MITRE

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 03:49 UTC. The most recent advisory here was published 2022-01-06. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.apache.nifi:nifi-security-utils safe? maven package security report | CyberXYZ