Maven/org.apache.nifi:nifi-cdc-mysql-processors CVE-2026-44913: high 7.2, EPSS 0.65%
Apache NiFi: Improper Escaping of Table Names in CaptureChangeMySQL
Action: Upgrade org.apache.nifi:nifi-cdc-mysql-processors to 2.10.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.2.0 | 2.10.0 | - |
Fixed versions
| 2.10.0 |
Sources
- osv: GHSA-chxj-gxww-q98w
- https://nvd.nist.gov/vuln/detail/CVE-2026-44913
- https://github.com/apache/nifi/pull/11206
- https://github.com/apache/nifi/commit/c9fd0be0ca428408137c70937761b46f95de5959
- https://github.com/apache/nifi
- https://issues.apache.org/jira/browse/NIFI-15905
- https://lists.apache.org/thread/c8vkt5rz4dqql6sjxgrr3zdkbt1sfmsl
- http://www.openwall.com/lists/oss-security/2026/06/20/5
CVE-2026-44913 · published · modified · JSON