Security fixes in apache-nifi 2.7.2-r0
Affects apache-nifiSource GCVE Database
Fixed in 2.7.2-r0 : update apache-nifi when convenient.
Data as of 09/09/2026, 13:38:10 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 2.7.2-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartapache-nifi | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should upgrade to apache-nifi version 2.7.2-r0 to apply the security fixes for the three identified vulnerabilities. Since this is not a cloud service, remediation requires manual upgrade. Patch status is confirmed as available in version 2.7.2-r0.
Description
Apache NiFi version 2.7.2-r0 addresses three distinct security vulnerabilities identified by GHSA identifiers ghsa-3677-xxcr-wjqv, ghsa-x44p-gvrj-pj2r, and ghsa-qqpg-mvqg-649v. These vulnerabilities are fixed in this specific package release. No CVSS score or detailed technical impact is provided for these vulnerabilities. There are no known exploits in the wild at this time. The package is not a cloud service, so remediation requires applying the fixed version.
Impact
The vulnerabilities fixed in apache-nifi 2.7.2-r0 could potentially impact users running earlier versions of apache-nifi. However, no specific impact details or exploit information is available. There are no known active exploits targeting these vulnerabilities.
Summary
The apache-nifi package version 2.7.2-r0 includes security fixes for three vulnerabilities referenced by GHSA IDs ghsa-3677-xxcr-wjqv, ghsa-x44p-gvrj-pj2r, and ghsa-qqpg-mvqg-649v. The exact nature and technical details of these vulnerabilities are not provided in the data. The release 2.7.2-r0 is the fixed version that addresses these issues.