NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#drpc

1 stories this week · 1 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relatedapache-storm1 authorization1 impersonation1

2 stories, newest first · one card per story

oss-security17h ago

Apache Storm DRPC doAsUser skips impersonation checks (CVE-2026-124496)

An authenticated Storm client can run DRPC functions limited to another user; 3.2.0 fixes storm-server.

2 sources apache-storm drpc

oss-securitySep 13, 2026

CVE-2026-82439: Apache Storm DRPC: Unauthenticated Unbounded Memory Growth in DRPC

Unauthenticated DRPC requests to Apache Storm 3.0.0 cause unbounded memory growth in the function-name queue map, enabling DoS.

apache-storm cve-2026-82439

1