Apache Nutch vulnerabilities

3 known CVE vulnerabilities in Apache Nutch, translated and rated.

CVE-2026-41871Critical
Missing Authorization and Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API). This affects versions from 1.10 through 1.22.
CVE-2026-41869Critical
Missing Authorization and Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (Nutch REST API). This affects versions from 1.10 through 1.22.
CVE-2026-41870High
Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control of Dynamically-Managed Code Resources, and Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Nutch Server (Nutch REST API). This affects versions from 1.11 through 1.22.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS