Nutch vulnerabilities

3 known vulnerabilities in Nutch from Apache. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache Nutch: Use of Externally-Controlled Input to Select Classes or Code

  CVE-2026-41871Sep 9, 2026Apache

  Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API). This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to versio

• 8.8 High severity

  Apache Nutch: Improper Control of Generation of Code

  CVE-2026-41870Sep 9, 2026Apache

  Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control of Dynamically-Managed Code Resources, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (N

• 9.1 Critical severity

  Apache Nutch: Improper Resource Shutdown or Release

  CVE-2026-41869Sep 9, 2026Apache

  Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (Nutch REST API). This issue affects Apache Nutch: from 1.10 through 1.22. Users are recommended to upgrade to version 1.23, which removes the Nutch Ser