You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@nifi.apache.org by Nathan Gough <th...@apache.org> on 2020/01/24 17:15:15 UTC

[ANNOUNCE] Apache NiFi 1.11.0 vulnerability announcements

Apache NiFi Community,

The https://nifi.apache.org/security.html page has been updated with 2
vulnerabilities discovered in previous NiFi versions which have been
resolved in release 1.11.0. The severity of these were determined to be one
'high' and one 'moderate'. Dependency vulnerabilities that were patched
have also been published. Questions about these vulnerabilities can be
directed to security@nifi.apache.org.

If you identify new security issues within the NiFi 1.11.0 release, please
forward your report to security@nifi.apache.org and do not disclose the
issue publicly. The security vulnerability reporting and disclosure process
can be found here: https://www.apache.org/security/committers.html.

Regards,
Nathan