Hello @fy-test,
Thanks for being part of our community.
That could be something normal, NiFi Registry 2.6 is a stable version released on September 21st.
https://cwiki.apache.org/confluence/display/NIFI/Release+Notes#ReleaseNotes-Version2.6.0
Now, those results can be true, but the scanner should tell the CVE-XXXX-XXX IDs
With those you can review if they are reported or not.
If you are using CDF you can open a case with Cloudera and report those CVEs for review.
Regards,
Andrés Fallas
--
Was your question answered? Please take some time to click on "Accept as Solution" below this post.
If you find a reply useful, say thanks by clicking on the thumbs-up button.