Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Storm DRPC

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-82439

    Apache Storm DRPC: Unauthenticated Unbounded Memory Growth in DRPC

    Description The DRPC server kept a map from function name to request queue and created an entry the first time a function name was seen. No code path ever removed an entry: request cleanup removed the request from its queue, and the shutdown path drained queu…

    Apache Software Foundation Apache Storm DRPC