Apache Software Foundation Apache Nutch vulnerabilities
4 known vulnerabilities affecting apache_software_foundation/apache_nutch.
Total CVEs
4
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH1
Vulnerabilities
Page 1 of 1
CVE-2026-41871P2CRITICALCVSS 9.8≥ 1.10, ≤ 1.222026-09-09
CVE-2026-41871 [CRITICAL] CWE-470 CVE-2026-41871: Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflect
Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API).
This issue affects Apache Nutch: from 1.10 through 1.22.
Users are recommended to upgrade to version 1.23, which removes the Nutch Server.
If an upgrade is not possible, user must rest
nvd
CVE-2026-41870P3HIGHCVSS 8.8≥ 1.11, ≤ 1.222026-09-09
CVE-2026-41870 [HIGH] CWE-94 CVE-2026-41870: Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control o
Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control of Dynamically-Managed Code Resources, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API).
This issue affects Apache Nutch: from 1.11 through 1.22.
Users are recomme
nvd
CVE-2021-23901P3CRITICALCVSS 9.1≥ Apache Nutch, ≤ 1.172021-01-25
CVE-2021-23901 [CRITICAL] CWE-611 CVE-2021-23901: An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is k
An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on t
nvd
CVE-2026-41869P3CRITICALCVSS 9.1≥ 1.10, ≤ 1.222026-09-09
CVE-2026-41869 [CRITICAL] CWE-404 CVE-2026-41869: Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch
Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (Nutch REST API).
This issue affects Apache Nutch: from 1.10 through 1.22.
Users are recommended to upgrade to version 1.23, which removes the Nutch Server.
If an upgrade is not possible, user must restrict access to instances running th
nvd