← All credits
The ASF using Claude Agents
13 vulnerability records and advisories credit this contributor.
CVE-2026-82439
Apache Storm DRPC: Unauthenticated Unbounded Memory Growth in DRPC
CVE-2026-82438
Apache Storm Webapp: Authenticated API Responses Exposed to Arbitrary Web Origins
CVE-2026-82437
Apache Storm Logviewer: Log Access Controls Not Enforced by Logviewer
CVE-2026-82435
Apache Storm Worker: Unauthenticated Remote Memory Exhaustion in the Worker Messaging Decoder
CVE-2026-82434
Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs
CVE-2026-82433
Apache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UI
CVE-2026-82432
Apache Storm Nimbus: Blobstore Authorization Bypass via Rebalance Configuration Overrides
CVE-2026-82431
Apache Storm Client: Authorization Bypass When nimbus.groups Is Configured Without nimbus.users
CVE-2026-82430
Apache Storm Worker Launcher: Local Privilege Escalation to Root via Container Command Files Chowned to the Tenant
CVE-2026-82429
Apache Storm Worker Launcher: Local Privilege Escalation to Root via a Time-of-Check Race in the Worker Launcher