org.apache.storm:apache-storm-source (3.0.0), org.apache.storm:final-package (3.0.0) +4 more potentially affected by CVE-2026-82432 via org.apache.storm:storm-server (3.0.0)

org.apache.storm:storm-server MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.storm:storm-server and may be impacted: - org.apache.storm:apache-storm-source 3.0.0 - org.apache.storm:final-package 3.0.0 -...

CVE-2026-82432

creationtimestamp| type| source ---|---|--- 2026-09-13 09:44:16+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117263083487894588...

PT-2026-90863

Description Nimbus validated topology.blobstore.map against the calling subject at submission time only. The rebalance operation accepts configuration overrides and stripped a small set of keys from them, but never re-ran that validation, so a caller authorised to rebalance a topology could...