Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Storm Worker

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-82435

    Apache Storm Worker: Unauthenticated Remote Memory Exhaustion in the Worker Messaging Decoder

    Description The worker's Netty message decoder is installed ahead of the SASL authentication handlers in the pipeline and acts on frames before any authentication has taken place. It allocated buffers sized from a length field carried in the frame, so a singl…

    Apache Software Foundation Apache Storm Worker