Package · Maven

org.apache.storm:storm-metrics-prometheus

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 4.8

CVE-2026-40557

Apache Storm Prometheus Reporter: Disabling TLS verification for Prometheus Reporter also disables it for all other connections

Improper Certificate Validation via Global SSL Context Downgrade in Apache Storm Prometheus Reporter Versions Affected: from 2.6.3 to 2.8.6 Description: In production deployments where an administrator enables storm.daemon.metrics.reporter.plugin.prometheus.…

Apache Software Foundation Apache Storm Prometheus Reporter org.apache.storm:storm-metrics-prometheus Maven

Apr 27, 2026