nifi-registry Helm chart

Name: nifi-registry Helm chart: images and vulnerabilities
Creator: StackRadar
License: https://creativecommons.org/licenses/by/4.0/

profyu

Scored 14 Sept 2026

Apache NiFi Registry

Latest 1.14.0-r001 4 years agoapp version 1.14.0 1Artifact Hub

nifi-registry 1.14.0-r001 deploys 1 container image: apache/nifi-registry. Across them, 259 findings — 8 critical, 8 high — 4 on CISA KEV. The highest contribution is GHSA-36p3-wjmg-h94x in spring-beans 5.3.5, fixed in 5.3.18.

Radar Score

4,6218887156

259 findings over 1 of 1 images measured

KEV ×4 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Container images

1 image

Image	Tag	Vulnerabilities	Radar Score
apache/nifi-registry	1.14.0	8887156	4,621

Rendered with the chart’s default values for linux/amd64. Optional subcharts, images set by operator flags and images inside CRD payloads are not seen and are counted as unmeasured.

Low findings

156 distinct across the version’s images

Low: findings whose contribution to the Radar Score is 1–14. Show every band

Severity	Advisory	Package	Fixed in
Low	GHSA-4mp9-239f-g9hg	netty-codec-http@4.1.33.Final	4.1.136.Final
Low	GHSA-3chg-m5w7-qfv5	spring-webmvc@5.3.8	no fix listed
Low	GHSA-hgj6-7826-r7m5	jackson-databind@2.12.3	2.18.8
Low	GHSA-wxpp-56q6-5pcg	spring-expression@5.3.5	no fix listed
Low	GHSA-5jmj-h7xm-6q6v	jackson-databind@2.12.3	2.18.9
Low	GHSA-6p4f-wcwh-5vvm	spring-webmvc@5.3.8	no fix listed
Low	GHSA-qh8g-58pp-2wxh	jetty-http@9.4.42.v20210604	12.0.12
Low	GHSA-x2r2-rvhq-2mqv	spring-security-web@5.5.0	no fix listed
Low	GHSA-wwpq-f5c3-7hvx	spring-boot@2.5.1	no fix listed
Low	GHSA-7p3p-8qv8-m2vh	jetty-server@9.4.42.v20210604	no fix listed
Low	GHSA-gcjf-9mgh-3p7g	netty-codec-http@4.1.33.Final	4.1.136.Final
Low	GHSA-v8h7-rr48-vmmv	netty-codec-http@4.1.33.Final	4.1.133.Final
Low	GHSA-9cmq-m9j5-mvww	spring-expression@5.3.5	5.3.39
Low	GHSA-563q-j3cm-6jxm	netty-codec-http2@4.1.33.Final	4.1.135.Final
Low	GHSA-5x3r-wrvg-rp6q	netty-codec-http2@4.1.33.Final	4.1.135.Final
Low	GHSA-3gh6-v5v9-6v9j	jetty-servlets@9.4.42.v20210604	9.4.52
Low	GHSA-xpw8-rcwv-8f8p	netty-codec-http2@4.1.33.Final	4.1.100.Final
Low	GHSA-293q-567p-wmwq	spring-security-web@5.5.0	no fix listed
Low	GHSA-q3v6-hm2v-pw99	spring-security-core@5.5.0	5.7.14
Low	GHSA-7g45-4rm6-3mm3	guava@28.0-jre	32.0.0-android
Low	GHSA-25qh-j22f-pwp8	logback-core@1.2.3	1.3.16
Low	GHSA-r47r-87p9-8jh3	spring-vault-core@2.3.2	2.3.3
Low	GHSA-5mg8-w23w-74h3	guava@28.0-jre	32.0.0-android
Low	GHSA-hvcg-qmg6-jm4c	netty-codec-http@4.1.33.Final	4.1.135.Final
Low	GHSA-957g-f97v-vppc	spring-webmvc@5.3.8	no fix listed
Low	GHSA-cjpg-rgq5-fr37	spring-webmvc@5.3.8	no fix listed
Low	DSA-4850-1	libzstd@1.3.8+dfsg-3	1.3.8+dfsg-3+deb10u1
Low	DLA-3474-1	systemd@241-7~deb10u4	241-7~deb10u10
Low	GHSA-wf8f-6423-gfxg	jackson-core@2.12.3	2.13.0
Low	GHSA-cj7v-27pg-wf7q	jetty-http@9.4.42.v20210604	9.4.47
Low	DSA-4808-1	apt@1.8.2.1	1.8.2.2
Low	DSA-4859-1	libzstd@1.3.8+dfsg-3	1.3.8+dfsg-3+deb10u2
Low	DLA-3755-1	tar@1.30+dfsg-6	1.30+dfsg-6+deb10u1
Low	GHSA-p26g-97m4-6q7c	jetty-server@9.4.42.v20210604	9.4.51.v20230217
Low	GHSA-659m-px2c-25wj	spring-core@5.3.8	no fix listed
Low	GHSA-4wp7-92pw-q264	spring-context@5.3.5	no fix listed
Low	GHSA-p53j-g8pw-4w5f	eddsa@0.3.0	no fix listed
Low	GHSA-h3qp-gqrc-q736	spring-webmvc@5.3.8	no fix listed
Low	GHSA-9f52-rjqv-25qv	spring-expression@5.3.5	no fix listed
Low	GHSA-w573-9ffj-6ff9	netty-transport-native-epoll@4.1.33.Final	4.1.135.Final
Low	GHSA-wjpw-4j6x-6rwh	jetty-http@9.4.42.v20210604	no fix listed
Low	GHSA-wg35-8jpf-2xv3	spring-webmvc@5.3.8	no fix listed
Low	DLA-3112-1	bzip2@1.0.6-9.2~deb10u1	1.0.6-9.2~deb10u2
Low	DLA-3134-1	tzdata@2020a-0+deb10u1	2021a-0+deb10u7
Low	DLA-3161-1	tzdata@2020a-0+deb10u1	2021a-0+deb10u8
Low	DLA-3366-1	tzdata@2020a-0+deb10u1	2021a-0+deb10u10
Low	DLA-3412-1	tzdata@2020a-0+deb10u1	2021a-0+deb10u11
Low	DLA-3482-1	debian-archive-keyring@2019.1	2019.1+deb10u2
Low	DLA-3684-1	tzdata@2020a-0+deb10u1	2021a-0+deb10u12
Low	DLA-3788-1	tzdata@2020a-0+deb10u1	2024a-0+deb10u1

Indexed versions

Version	Published	App version	Vulnerabilities	Radar Score
1.14.0-r001latest	4 years ago	1.14.0	8887156	4,621

The latest version and the previous major, as selected nightly from the repository’s index.

README badge

[![Radar Score](https://charts.stackradar.io/badge/profyu/nifi-registry.svg)](https://charts.stackradar.io/charts/profyu/nifi-registry)

Markdown. The badge shows the latest version’s band and Radar Score, refreshed daily.