/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-hh56-m6x9-xqf5

Published

Last updated

https://images.chainguard.dev/security/CGA-hh56-m6x9-xqf5
Package

apache-nifi

RepositoryWolfi
Latest Update
Fixed
Fixed Version

2.0.0-r0

Aliases
  • CVE-2024-23454
  • GHSA-f5fw-25gw-5m92

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-23454

Updates

Status

Fixed

Fixed version

2.0.0-r0

Status

Pending upstream fix

Impact

This vulnerability exists within a pre-compiled dependency which nifi depends on, and we lack the ability to patch. The most recent version of nifi-hbase_2-client-service-nar is implemented and can be found here: https://mvnrepository.com/artifact/org.apache.nifi/nifi-hbase_2-client-service-nar/1.27.0 The upstream maintainers must mitigate this CVE.

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing