nifi-registry 1.14.0-r001 Helm chart

Name: nifi-registry Helm chart 1.14.0-r001: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

profyu

Scored 14 Sept 2026

Apache NiFi Registry

Version 1.14.0-r001 4 years agoapp version 1.14.0 1Artifact Hub

nifi-registry 1.14.0-r001 deploys 1 container image: apache/nifi-registry. Across them, 259 findings — 8 critical, 8 high — 4 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.3.5, fixed in 5.3.18.

Radar Score

4,6218887156

259 findings over 1 of 1 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
apache/nifi-registry	1.14.0	8887156	4,621

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Vulnerabilities

259 distinct across the version’s images

Severity	Advisory	Package	Fixed in
Critical	GHSA-36p3-wjmg-h94xKEV	spring-beans@5.3.5	5.3.18
Critical	GHSA-36p3-wjmg-h94xKEV	spring-boot-starter-web@2.5.1	2.5.12
Critical	GHSA-36p3-wjmg-h94xKEV	spring-webmvc@5.3.8	5.3.18
Critical	GHSA-599f-7c49-w659	commons-text@1.8	1.10.0
Critical	GHSA-45hx-wfhj-473x	h2@1.4.199	2.1.210
Critical	GHSA-h376-j262-vhq6	h2@1.4.199	2.0.206
Critical	GHSA-mjmj-j48q-9wg2	snakeyaml@1.28	2.0
Critical	GHSA-xj57-8qj4-c4m6	commons-configuration2@2.7	2.8.0
High	GHSA-4wrc-f8pq-fpqp	spring-web@5.3.8	6.0.0
High	GHSA-g5vr-rgqm-vf78	spring-webmvc@5.3.8	no fix listed
High	GHSA-vjv5-gp2w-65vm	jetty-webapp@9.4.42.v20210604	9.4.43
High	GHSA-hh32-7344-cg2f	spring-security-web@5.5.0	5.5.7
High	GHSA-hh32-7344-cg2f	spring-security-core@5.5.0	5.5.7
High	GHSA-558x-2xjg-6232	spring-expression@5.3.5	5.3.17
High	GHSA-cqqj-4p63-rrmm	netty-codec-http@4.1.33.Final	4.1.44
High	DLA-3621-1KEV	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u2
Medium	GHSA-cx7f-g6mp-7hqm	spring-webmvc@5.3.8	no fix listed
Medium	DSA-5169-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u3
Medium	DLA-3807-1	glibc@2.28-10	2.28-10+deb10u3
Medium	DSA-4963-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u7
Medium	DLA-3804-1	nghttp2@1.36.0-2+deb10u1	1.36.0-2+deb10u3
Medium	GHSA-3f7h-mf4q-vrm4	woodstox-core@6.2.4	6.4.0
Medium	DSA-5139-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u2
Medium	DLA-3449-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u5
Medium	DSA-5103-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u8
Medium	DSA-5140-1	openldap@2.4.47+dfsg-3+deb10u6	2.4.47+dfsg-3+deb10u7
Medium	DSA-4875-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u6
Medium	GHSA-mm9x-g8pc-w292	netty-handler@4.1.33.Final	4.1.46
Medium	GHSA-wm47-8v5p-wjpj	netty-codec-http2@4.1.33.Final	4.1.60.Final
Medium	DLA-3325-1	openssl@1.1.1d-0+deb10u3	1.1.1n-0+deb10u4
Medium	GHSA-fhw8-8j55-vwgq	sshd-common@2.6.0	2.9.2
Medium	GHSA-fhw8-8j55-vwgq	sshd-core@2.6.0	2.9.2
Medium	DSA-5111-1	zlib@1:1.2.11.dfsg-1	1:1.2.11.dfsg-1+deb10u1
Medium	DSA-4855-1	openssl@1.1.1d-0+deb10u3	1.1.1d-0+deb10u5
Medium	GHSA-9vjp-v76f-g363	netty-codec@4.1.33.Final	4.1.68.Final
Medium	GHSA-7phw-cxx7-q9vq	spring-webmvc@5.3.8	5.3.26
Medium	GHSA-w9jg-gvgr-354m	spring-security-core@5.5.0	5.5.1
Medium	GHSA-grg4-wf29-r9vv	netty-codec@4.1.33.Final	4.1.68.Final
Medium	GHSA-g5mm-vmx4-3rg7	spring-context@5.3.5	5.3.19
Medium	GHSA-p2v9-g2qv-p635	netty-handler@4.1.33.Final	4.1.45
Medium	GHSA-ccgv-vj62-xf9h	spring-web@5.3.8	5.3.32
Medium	DLA-3085-1	curl@7.64.0-4+deb10u2	7.64.0-4+deb10u3
Medium	GHSA-57j2-w4cx-62h2	jackson-databind@2.12.3	2.12.6.1
Medium	GHSA-3p86-9955-h393	org.eclipse.jgit@5.11.1.202105131744-r	5.13.3.202401111512-r
Medium	DLA-3172-1	libxml2@2.9.4+dfsg1-7+deb10u2	2.9.4+dfsg1-7+deb10u5
Medium	GHSA-7rpj-hg47-cx62	h2@1.4.199	2.0.202
Medium	DLA-3101-1	libxslt@1.1.32-2.2~deb10u1	1.1.32-2.2~deb10u2
Medium	GHSA-hgjh-9rj2-g67j	spring-web@5.3.8	5.3.33
Medium	GHSA-7r82-7xv7-xcpj	httpclient@4.5.6	4.5.13
Medium	GHSA-c4q5-6c82-3qpw	spring-security-web@5.5.0	5.7.13

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.14.0-r001latest	4 years ago	1.14.0	8887156	4,621

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/profyu/nifi-registry.svg)](https://charts.stackradar.io/charts/profyu/nifi-registry)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.