CVE-2026-70469: Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests

<p>Posted by David Handermann on Sep 16</p>Severity: High <br /> <br /> Affected versions:<br /> <br /> - Apache NiFi (org.apache.nifi:nifi-jetty) 2.11.0<br /> <br /> Description:<br /> <br /> Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests <br /> that included the standard Content-Encoding header indicating gzip encoding. The f