oss-security·13d ago highCVE-2026-82435: Apache Storm Worker: Unauthenticated Remote Memory Exhaustion in the Worker Messaging Decoder#apache#cve#denial-of-serviceCVE-2026-824353
oss-security·13d agoCVE-2026-82434: Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs#apache#credential-disclosure#cveCVE-2026-824342
oss-security·13d agoCVE-2026-82433: Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI#apache#configuration-exposure#cveCVE-2026-82433
oss-security·13d agoCVE-2026-82432: Apache Storm Nimbus: Blobstore Authorization Bypass via Rebalance Configuration Overrides#apache#authorization-bypass#blobstoreCVE-2026-824321
oss-security·13d agoCVE-2026-82426: Apache Storm Nimbus: Arbitrary File Read on Nimbus via Unvalidated Uploaded Jar Location#apache#arbitrary-file-read#cveCVE-2026-824262