- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 8 · 2 high, 1 low
- Dependents
- 6
- Registry
- Maven Central
Advisories 8
- CVE-2026-82429High 7.8
Apache Storm Worker Launcher: Local Privilege Escalation to Root via a Time-of-Check Race in the Worker Launcher
Affected: from 3.0.0, fixed in 3.1.0.
- CVE-2026-82430High 7.8
Apache Storm Worker Launcher: Local Privilege Escalation to Root via Container Command Files Chowned to the Tenant
Affected: from 3.0.0, fixed in 3.1.0.
Apache Storm: Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary files
Affected: from 2.0.0, fixed in 2.6.0.
- CVE-2019-0202Unrated
The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm.
Affected: from 0.9.1-incubating, fixed in 1.2.3.
- CVE-2018-1331Unrated
In Apache Storm 0.10.0 through 0.10.2, 1.0.0 through 1.0.6, 1.1.0 through 1.1.2, and 1.2.0 through 1.2.1, an attacker with access to a…
Affected: from 1.2.0, fixed in 1.2.2; fixed in 1.1.3.
- CVE-2018-8008Unrated
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability…
Affected: from 1.1.0, fixed in 1.1.3; from 1.2.0, fixed in 1.2.2; fixed in 1.0.7.
- CVE-2018-1332Unrated
Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to…
Affected: fixed in 1.1.3; from 1.2.0, fixed in 1.2.2.
- CVE-2017-9799Unrated
It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically…
Affected: from 1.1.0, fixed in 1.1.1; from 1.0.0, fixed in 1.0.4.