oss-security·13d agoCVE-2026-82431: Apache Storm Client: Authorization Bypass When nimbus.groups Is Configured Without nimbus.users#acl#apache-storm#authorization-bypassCVE-2026-82431
oss-security·13d agoCVE-2026-82428: Apache Storm Client: Cross-Tenant Dependency Jar Substitution via Predictable Blob Keys#apache-storm#blobstore#cross-tenantCVE-2026-824281