{"action":"Upgrade org.apache.nifi:nifi-cdc-mysql-processors to 2.10.0 or later.","affected":[{"fixed":"2.10.0","introduced":"1.2.0"}],"component":"org.apache.nifi:nifi-cdc-mysql-processors","cve_ids":["CVE-2026-44913"],"ecosystem":"Maven","epss":0.00646,"exploited":false,"fixed_versions":["2.10.0"],"ghsa_id":"GHSA-chxj-gxww-q98w","id":"tcs_01M5N8SGQWZH1856NMWPXR3AKN","modified_at":"2026-09-14T18:55:43.661155582Z","published_at":"2026-06-22T09:30:45Z","references":["https://osv.dev/vulnerability/GHSA-chxj-gxww-q98w","https://nvd.nist.gov/vuln/detail/CVE-2026-44913","https://github.com/apache/nifi/pull/11206","https://github.com/apache/nifi/commit/c9fd0be0ca428408137c70937761b46f95de5959","https://github.com/apache/nifi","https://issues.apache.org/jira/browse/NIFI-15905","https://lists.apache.org/thread/c8vkt5rz4dqql6sjxgrr3zdkbt1sfmsl","http://www.openwall.com/lists/oss-security/2026/06/20/5"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-chxj-gxww-q98w","url":"https://osv.dev/vulnerability/GHSA-chxj-gxww-q98w"}],"summary":"Apache NiFi: Improper Escaping of Table Names in CaptureChangeMySQL"}