org.apache.nifi:nifi-framework@1.11.2 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.apache.nifi:nifi-framework package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Insecure Encryption

org.apache.nifi:nifi-framework is a system to process and distribute data.

Affected versions of this package are vulnerable to Insecure Encryption. A few NiFi framework classes use the MD5 algorithm for determining whether file contents have changed. This algorithm is known for having several security issues.

How to fix Insecure Encryption?

Upgrade org.apache.nifi:nifi-framework to version 1.14.0 or higher.