nifi-registry 1.1.5 Helm chart

Name: nifi-registry Helm chart 1.1.5: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

dysnix

Scored 14 Sept 2026

A subproject of Apache NiFi to store and manage shared resources.

Version 1.1.5 2 years agoapp version 0.8.0 1Artifact Hub

nifi-registry 1.1.5 deploys 2 container images: library/alpine and apache/nifi-registry. Across them, 314 findings — 6 critical, 22 high — 4 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-webmvc 5.2.5.RELEASE, fixed in 5.2.20.RELEASE.

Radar Score

6,531622131155

314 findings over 2 of 2 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

2 images

Image	Tag	Vulnerabilities	Radar Score
library/alpine	3.6	0000	0
apache/nifi-registry	0.8.0	622131155	6,531

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

314 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.2.5.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.2.5.RELEASE	5.2.20.RELEASE
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.2.6.RELEASE	2.5.12
Critical	GHSA-45hx-wfhj-473x	h2@1.4.199	2.1.210
Critical	GHSA-h376-j262-vhq6	h2@1.4.199	2.0.206
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.20	2.0
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.2.5.RELEASE	6.0.0
High	GHSA-4w82-r329-3q67	jackson-databind@2.9.8	2.9.10.3
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.2.5.RELEASE	no fix listed
High	GHSA-26vr-8j45-3r4w	jetty-server@9.4.19.v20190610	9.4.39
High	GHSA-q93h-jc49-78gg	jackson-databind@2.9.8	2.9.10.4
High	GHSA-p43x-xfjf-5jhr	jackson-databind@2.9.8	2.9.10.4
High	GHSA-gwcr-j4wh-j3cq	jetty-servlets@9.4.19.v20190610	9.4.41
High	GHSA-hh32-7344-cg2f	spring-security-core@5.2.2.RELEASE	5.4.11
High	GHSA-hh32-7344-cg2f	spring-security-web@5.2.2.RELEASE	5.4.11
High	GHSA-m394-8rww-3jr7	jetty-server@9.4.19.v20190610	9.4.37
High	GHSA-rvwf-54qp-4r6v	snakeyaml@1.20	1.26
High	GHSA-9gph-22xh-8x98	jackson-databind@2.9.8	2.9.10.8
High	GHSA-h822-r4r5-v8jg	jackson-databind@2.9.8	2.9.10
High	GHSA-558x-2xjg-6232	spring-expression@5.2.5.RELEASE	5.2.20.RELEASE
High	GHSA-mph4-vhrx-mv67	jackson-databind@2.9.8	2.9.9.1
High	GHSA-5ww9-j83m-q7qx	jackson-databind@2.9.8	2.9.9
High	GHSA-gww7-p5w4-wrfv	jackson-databind@2.9.8	2.9.10.2
High	GHSA-6fpp-rgj9-8rwc	jackson-databind@2.9.8	2.9.9.2
High	GHSA-288c-cq4h-88gq	jackson-databind@2.10.3	2.10.5.1
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.33.Final	4.1.44
High	GHSA-5r5r-6hpj-8gg9	jackson-databind@2.9.8	2.9.10.8
High	DLA-3621-1KEV	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u2
Medium	DSA-5169-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u3
Medium	GHSA-f9xh-2qgp-cq57	jackson-databind@2.9.8	2.9.10.8
Medium	DLA-3807-1	glibc@2.28-10	2.28-10+deb10u3
Medium	DSA-4963-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u7
Medium	GHSA-m6x4-97wx-4q27	jackson-databind@2.9.8	2.9.10.8
Medium	GHSA-fqwf-pjwf-7vqv	jackson-databind@2.9.8	2.9.10.4
Medium	DLA-3804-1	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u3
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@6.1.1	6.4.0
Medium	GHSA-mx7p-6679-8g3q	jackson-databind@2.9.8	2.9.10.1
Medium	DSA-4845-1	openldap@2.4.47+dfsg-3+deb10u2	2.4.47+dfsg-3+deb10u5
Medium	DSA-5139-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u2
Medium	GHSA-r3gr-cxrf-hg25	jackson-databind@2.9.8	2.9.10.8
Medium	GHSA-gjmw-vf9h-g25v	jackson-databind@2.9.8	2.9.10.1
Medium	GHSA-h3cw-g4mq-c5x2	jackson-databind@2.9.8	2.9.10.6
Medium	DLA-3449-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u5
Medium	DSA-5103-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u8
Medium	GHSA-85cw-hj65-qqv9	jackson-databind@2.9.8	2.9.10
Medium	GHSA-fmmc-742q-jg75	jackson-databind@2.9.8	2.9.10.1
Medium	GHSA-gwp4-hfv6-p7hw	jackson-databind@2.9.8	2.9.9.2
Medium	GHSA-j823-4qch-3rgm	jackson-databind@2.9.8	2.9.10.5
Medium	GHSA-f3j5-rmmp-3fc5	jackson-databind@2.9.8	2.9.10
Medium	GHSA-5p34-5m6p-p58g	jackson-databind@2.9.8	2.9.10.4

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.1.5latest	2 years ago	0.8.0	622131155	6,531

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/dysnix/nifi-registry.svg)](https://charts.stackradar.io/charts/dysnix/nifi-registry)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.