| CVE-2026-82428 |
Description Dependency artifacts uploaded with `storm jar --artifacts` were stored under a blob key derived only from…
|
Not rated
|
Sep 14, 2026 |
| CVE-2026-82431 |
Description `SimpleACLAuthorizer` evaluated the user-level command set by returning early when `nimbus.users` was empty,…
|
Not rated
|
Sep 14, 2026 |
| CVE-2026-82434 |
Description When ZooKeeper authentication is configured, Storm deliberately retains…
|
10.0
Critical
|
Sep 14, 2026 |
| CVE-2026-41081 |
Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm…
|
Not rated
|
Apr 27, 2026 |
| CVE-2026-35337 |
Deserialization of Untrusted Data vulnerability in Apache Storm
|
Not rated
|
Apr 13, 2026 |