Apache NiFi: 1.19.1 → 2.9.0
Apache · upgrade impact · Official site ↗
Fixed by upgrading to 2.9.0 iVulnerabilities that affect 1.19.1 but no longer affect 2.9.0 — the security gain from this upgrade, by exploited status then exploitation probability.
Exploited first, then by exploitation probability (EPSS).
CVE-2023-34468 HIGH EPSS 63% ✓ cleared in 2.9.0 CVE-2024-37389 MEDIUM EPSS 24% ✓ cleared in 2.9.0 CVE-2024-56512 MEDIUM EPSS 3% ✓ cleared in 2.9.0 CVE-2023-34212 MEDIUM EPSS 2% ✓ cleared in 2.9.0 CVE-2023-36542 HIGH EPSS 2% ✓ cleared in 2.9.0 CVE-2023-22832 HIGH EPSS 1% ✓ cleared in 2.9.0 CVE-2023-49145 HIGH EPSS 1% ✓ cleared in 2.9.0 CVE-2025-27017 MEDIUM EPSS 1% ✓ cleared in 2.9.0 CVE-2026-25903 MEDIUM EPSS 1% ✓ cleared in 2.9.0 CVE-2024-52067 MEDIUM EPSS 1% ✓ cleared in 2.9.0 CVE-2024-45477 MEDIUM EPSS 1% ✓ cleared in 2.9.0