https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T16:35:15.424077+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-25450 cnvd-2019-25450 2026-10-22T16:35:15.490262+00:00 cnvd-2019-25450 https://cve.radiocsirt.org/vuln/euvd-2026-65460 EUVD-2026-65460 2026-10-22T16:35:15.490322+00:00 EUVD-2026-65460 https://cve.radiocsirt.org/vuln/fkie_cve-2018-11779 fkie_cve-2018-11779 2026-10-22T16:35:15.490348+00:00

In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is possible to cause the Storm UI daemon to deserialize user provided bytes into a Java class.

 https://cve.radiocsirt.org/vuln/ghsa-25pc-85qf-6j69 GHSA-25pc-85qf-6j69 — Deserialization of Untrusted Data in Apache Storm 2026-10-22T16:35:15.490405+00:00

Affected: Maven: org.apache.storm:storm-kafka, Maven: org.apache.storm:storm-kafka-client

In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is possible to cause the Storm UI daemon to deserialize user provided bytes into a Java class.

 https://cve.radiocsirt.org/vuln/gsd-2018-11779 gsd-2018-11779 2026-10-22T16:35:15.490462+00:00 gsd-2018-11779