Apache Software Foundation Apache NiFi Registry

• CVE-2026-87976 High 7.2 Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles 0.8%
• CVE-2022-33140 Unrated Improper Neutralization of Command Elements in Shell User Group Provider 3.5%