← All credits
The Apache Nutch Project Management Committee would like to thank Th1nk for reporting this issue.
3 vulnerability records and advisories credit this contributor.
CVE-2026-41870
Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)
CVE-2026-41869
Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)
CVE-2026-41871
Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)