pkg:Maven/org.apache.storm:storm-core

All known vulnerabilities

• HIGH8.8CVE-2018-1331Code execution in org.apache.storm:storm-core
  >= 1.2.0, < 1.2.2
• HIGH8.8CVE-2017-9799Apache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user
  >= 1.1.0, < 1.1.1
• HIGH7.5CVE-2019-0202Exposure of Sensitive Information in Apache Storm Logviewer
  >= 0.9.1-incubating, < 1.2.3
• MEDIUM6.5Moderate severity vulnerability that affects org.apache.storm:storm-core
  from 0, < 1.1.3
• MEDIUM5.5Apache Storm Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary files
  >= 2.0.0, < 2.6.0
• MEDIUM5.5ZipSlip in org.apache.storm:storm-core
  >= 1.1.0, < 1.1.3