apache/nifi-registry:1.14.0 container image
Docker HubScanned 14 Sept 2026
Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of apache/nifi-registry
apache/nifi-registry:1.14.0 resolved to 090b7f87ec7f, scanned 14 Sept 2026: 259 findings, 8 critical, 4 on KEV; deployed by 1 chart, among them nifi-registry.
Radar Score
Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.
Vulnerabilities
259 distinct on this digest
Findings for digest 090b7f87ec7f as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.
| Severity | Advisory | Package | Fixed in |
|---|---|---|---|
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-beans | 5.3.18 |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-boot-starter-web | 2.5.12 |
| Critical | GHSA-36p3-wjmg-h94xKEV | spring-webmvc | 5.3.18 |
| Critical | GHSA-599f-7c49-w659 | commons-text | 1.10.0 |
| Critical | GHSA-45hx-wfhj-473x | h2 | 2.1.210 |
| Critical | GHSA-h376-j262-vhq6 | h2 | 2.0.206 |
| Critical | GHSA-mjmj-j48q-9wg2 | snakeyaml | 2.0 |
| Critical | GHSA-xj57-8qj4-c4m6 | commons-configuration2 | 2.8.0 |
| High | GHSA-4wrc-f8pq-fpqp | spring-web | 6.0.0 |
| High | GHSA-g5vr-rgqm-vf78 | spring-webmvc | no fix listed |
| High | GHSA-vjv5-gp2w-65vm | jetty-webapp | 9.4.43 |
| High | GHSA-hh32-7344-cg2f | spring-security-web | 5.5.7 |
| High | GHSA-hh32-7344-cg2f | spring-security-core | 5.5.7 |
| High | GHSA-558x-2xjg-6232 | spring-expression | 5.3.17 |
| High | GHSA-cqqj-4p63-rrmm | netty-codec-http | 4.1.44 |
| High | DLA-3621-1KEV | nghttp2 | 1.36.0-2+deb10u2 |
| Medium | GHSA-cx7f-g6mp-7hqm | spring-webmvc | no fix listed |
| Medium | DSA-5169-1 | openssl | 1.1.1n-0+deb10u3 |
| Medium | DLA-3807-1 | glibc | 2.28-10+deb10u3 |
| Medium | DSA-4963-1 | openssl | 1.1.1d-0+deb10u7 |
| Medium | DLA-3804-1 | nghttp2 | 1.36.0-2+deb10u3 |
| Medium | GHSA-3f7h-mf4q-vrm4 | woodstox-core | 6.4.0 |
| Medium | DSA-5139-1 | openssl | 1.1.1n-0+deb10u2 |
| Medium | DLA-3449-1 | openssl | 1.1.1n-0+deb10u5 |
| Medium | DSA-5103-1 | openssl | 1.1.1d-0+deb10u8 |
| Medium | DSA-5140-1 | openldap | 2.4.47+dfsg-3+deb10u7 |
| Medium | DSA-4875-1 | openssl | 1.1.1d-0+deb10u6 |
| Medium | GHSA-mm9x-g8pc-w292 | netty-handler | 4.1.46 |
| Medium | GHSA-wm47-8v5p-wjpj | netty-codec-http2 | 4.1.60.Final |
| Medium | DLA-3325-1 | openssl | 1.1.1n-0+deb10u4 |
| Medium | GHSA-fhw8-8j55-vwgq | sshd-common | 2.9.2 |
| Medium | GHSA-fhw8-8j55-vwgq | sshd-core | 2.9.2 |
| Medium | DSA-5111-1 | zlib | 1:1.2.11.dfsg-1+deb10u1 |
| Medium | DSA-4855-1 | openssl | 1.1.1d-0+deb10u5 |
| Medium | GHSA-9vjp-v76f-g363 | netty-codec | 4.1.68.Final |
| Medium | GHSA-7phw-cxx7-q9vq | spring-webmvc | 5.3.26 |
| Medium | GHSA-w9jg-gvgr-354m | spring-security-core | 5.5.1 |
| Medium | GHSA-grg4-wf29-r9vv | netty-codec | 4.1.68.Final |
| Medium | GHSA-g5mm-vmx4-3rg7 | spring-context | 5.3.19 |
| Medium | GHSA-p2v9-g2qv-p635 | netty-handler | 4.1.45 |
| Medium | GHSA-ccgv-vj62-xf9h | spring-web | 5.3.32 |
| Medium | DLA-3085-1 | curl | 7.64.0-4+deb10u3 |
| Medium | GHSA-57j2-w4cx-62h2 | jackson-databind | 2.12.6.1 |
| Medium | GHSA-3p86-9955-h393 | org.eclipse.jgit | 5.13.3.202401111512-r |
| Medium | DLA-3172-1 | libxml2 | 2.9.4+dfsg1-7+deb10u5 |
| Medium | GHSA-7rpj-hg47-cx62 | h2 | 2.0.202 |
| Medium | DLA-3101-1 | libxslt | 1.1.32-2.2~deb10u2 |
| Medium | GHSA-hgjh-9rj2-g67j | spring-web | 5.3.33 |
| Medium | GHSA-7r82-7xv7-xcpj | httpclient | 4.5.13 |
| Medium | GHSA-c4q5-6c82-3qpw | spring-security-web | 5.7.13 |
Used by
1 chart
| Chart | Version | Tag | Containers |
|---|---|---|---|
| nifi-registryprofyu | 1.14.0-r001 | 1.14.0 | 1 |
Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.