{"action":"Upgrade org.apache.nifi:nifi to 1.15.1 or later.","affected":[{"fixed":"1.15.1","introduced":"0"}],"component":"org.apache.nifi:nifi","cve_ids":["CVE-2021-44145"],"ecosystem":"Maven","epss":0.01757,"exploited":false,"fixed_versions":["1.15.1"],"ghsa_id":"GHSA-rq96-qhc5-vm4r","id":"tcs_01M5N9C9Y9Z2XYNQ7C5SCH8FGR","modified_at":"2025-09-15T07:42:02.238708Z","published_at":"2022-01-05T17:33:32Z","references":["https://osv.dev/vulnerability/GHSA-rq96-qhc5-vm4r","https://nvd.nist.gov/vuln/detail/CVE-2021-44145","https://nifi.apache.org/security.html#1.15.1-vulnerabilities","http://www.openwall.com/lists/oss-security/2021/12/17/1"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-rq96-qhc5-vm4r","url":"https://osv.dev/vulnerability/GHSA-rq96-qhc5-vm4r"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Apache NiFi"}