Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.nifi/nifi-security@1.7.1
purl pkg:maven/org.apache.nifi/nifi-security@1.7.1
Next non-vulnerable version 1.10.0
Latest non-vulnerable version 1.10.0
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-4v3d-ugqf-uyag
Aliases:
CVE-2019-10080
GHSA-744r-vv2g-2x6g
Apache NiFi information disclosure by XXE The XMLFileLookupService in NiFi versions 1.3.0 to 1.9.2 allowed trusted users to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services (via XXE) and reveal information such as the versions of Java, Jersey, and Apache that the NiFI instance uses.
1.10.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T20:59:07.387257+00:00 GitLab Importer Affected by VCID-4v3d-ugqf-uyag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.nifi/nifi-security/CVE-2019-10080.yml 38.4.0
2026-04-11T22:10:19.468711+00:00 GitLab Importer Affected by VCID-4v3d-ugqf-uyag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.nifi/nifi-security/CVE-2019-10080.yml 38.3.0
2026-04-02T22:22:54.992108+00:00 GitLab Importer Affected by VCID-4v3d-ugqf-uyag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.nifi/nifi-security/CVE-2019-10080.yml 38.1.0
2026-04-01T16:40:41.632090+00:00 GitLab Importer Affected by VCID-4v3d-ugqf-uyag https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.nifi/nifi-security/CVE-2019-10080.yml 38.0.0