org.apache.nifi:nifi-framework@0.0.1-incubating vulnerabilities
latest version
2.4.0
latest non vulnerable version
first published
10 years ago
latest version published
10 days ago
licenses detected
- [0.0.1-incubating,)
package registry
Direct Vulnerabilities
Known vulnerabilities in the org.apache.nifi:nifi-framework package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
org.apache.nifi:nifi-framework is a system to process and distribute data. Affected versions of this package are vulnerable to Insecure Encryption. A few NiFi framework classes use the MD5 algorithm for determining whether file contents have changed. This algorithm is known for having several security issues. How to fix Insecure Encryption? Upgrade | [,1.14.0) |
org.apache.nifi:nifi-framework is a system to process and distribute data. Affected versions of this package are vulnerable to Information Exposure. The flow fingerprint factory generated flow fingerprints which included sensitive property descriptor values. In the event a node attempted to join a cluster and the cluster flow was not inheritable, the flow fingerprint of both the cluster and local flow was printed, potentially containing sensitive values in plaintext. How to fix Information Exposure? Upgrade | [,1.11.1) |