| CVE-2026-82427 |
Description A topology's `topology.blobstore.map` lets the submitter choose a local name for each blob that the…
|
Not rated
|
Sep 14, 2026 |
| CVE-2026-82433 |
Description `getNimbusConf` returned the complete daemon configuration without redaction after only a user-level…
|
Not rated
|
Sep 14, 2026 |
| CVE-2026-82432 |
Description
Nimbus validated `topology.blobstore.map` against the calling subject at submission time only
|
Not rated
|
Sep 14, 2026 |
| CVE-2026-82434 |
Description When ZooKeeper authentication is configured, Storm deliberately retains…
|
10.0
Critical
|
Sep 14, 2026 |
| CVE-2026-82426 |
Description Nimbus accepted the `uploadedJarLocation` argument of `submitTopology` / `submitTopologyWithOpts` as a…
|
Not rated
|
Sep 14, 2026 |
| CVE-2026-82441 |
Description A submitted topology carries two lists of blobstore keys, `dependency_jars` and `dependency_artifacts`,…
|
Not rated
|
Sep 14, 2026 |
| CVE-2026-84179 |
Description getTopologyPageInfo merged the Nimbus daemon configuration with the topology's own configuration and…
|
Not rated
|
Sep 14, 2026 |