| CVE-2026-82428 |
Description Dependency artifacts uploaded with `storm jar --artifacts` were stored under a blob key derived only from…
|
Non notée
|
14 sept. 2026 |
| CVE-2026-82431 |
Description `SimpleACLAuthorizer` evaluated the user-level command set by returning early when `nimbus.users` was empty,…
|
Non notée
|
14 sept. 2026 |
| CVE-2026-82434 |
Description When ZooKeeper authentication is configured, Storm deliberately retains…
|
10.0
Critique
|
14 sept. 2026 |
| CVE-2026-41081 |
Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm…
|
Non notée
|
27 avr. 2026 |
| CVE-2026-35337 |
Deserialization of Untrusted Data vulnerability in Apache Storm
|
Non notée
|
13 avr. 2026 |