`org.apache.storm:storm-core`

Ecosystem:
maven

Package URL:
pkg:maven/org.apache.storm:storm-core

Total PRs:
9 Dependabot PRs

Latest PR:
10 months ago

Unique Repositories:
5 repositories

Unique Repos (30 days):
0 repositories

Security Advisories

Code execution in org.apache.storm:storm-core

GHSA-p8jx-x2vw-wm33 CVE-2018-1331 HIGH published almost 8 years ago • updated 9 days ago

In Apache Storm 0.10.0 through 0.10.2, 1.0.0 through 1.0.6, 1.1.0 through 1.1.2, and 1.2.0 through 1.2.1, an attacker with access to a secure storm...

Moderate severity vulnerability that affects org.apache.storm:storm-core

GHSA-q35p-chc6-7x57 CVE-2018-1332 MODERATE published almost 8 years ago • updated about 1 month ago

Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose a vulnerability that could allow a user to imperson...

Exposure of Sensitive Information in Apache Storm Logviewer

GHSA-r9pv-hg64-jqrp CVE-2019-0202 HIGH published about 4 years ago • updated about 1 month ago

The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1...

Apache Storm Local Information Disclosure Vulnerability in Storm-core on Unix-Like systems due temporary files

GHSA-85p4-q357-72h9 CVE-2023-43123 MODERATE published over 2 years ago • updated 17 days ago

On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set ...

Apache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user

GHSA-x825-rjww-2245 CVE-2017-9799 HIGH published almost 8 years ago • updated about 1 month ago

It was found that under some situations and configurations of Apache Storm 1.x before 1.0.4 and 1.1.x before 1.1.1, it is theoretically possible fo...

View all 6 advisories

Recent PRs

Bump org.apache.storm:storm-core from 2.6.4 to 2.8.2

jiangxincode/JavaWebTest #236

2.6.4 → 2.8.2 Minor PR

Merged 10 months ago

bump org.apache.storm:storm-core from 2.2.0 to 2.6.0 in /examples/storm

trizist/bullet-db.github.io #2

2.2.0 → 2.6.0 Minor PR

Open 10 months ago

Bump org.apache.storm:storm-core from 2.8.0 to 2.8.2

rahilsh/storm-topology #72

2.8.0 → 2.8.2 Patch PR

Open 12 months ago

Bump org.apache.storm:storm-core from 1.1.3 to 2.8.2 in /thresh

thuvh/monasca-thresh #27

1.1.3 → 2.8.2 Major PR

Closed 12 months ago 1 comment

Bump org.apache.storm:storm-core from 2.8.0 to 2.8.1

rahilsh/storm-topology #71

2.8.0 → 2.8.1 Patch PR

Closed about 1 year ago 1 comment

Bump the maven group across 10 directories with 32 updates

thismahbub/tutorials #1

1.2.2 → 1.2.3 Patch PR

Open about 1 year ago

Bump org.apache.storm:storm-core from 1.1.3 to 2.8.0 in /thresh

thuvh/monasca-thresh #7

1.1.3 → 2.8.0 Major PR

Closed over 1 year ago 1 comment

Bump org.apache.storm:storm-core from 2.6.1 to 2.6.4

jiangxincode/JavaWebTest #196

2.6.1 → 2.6.4 Patch PR

Merged almost 2 years ago

Package Details

Name:	`org.apache.storm:storm-core`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.apache.storm:storm-core`
JSON API:	View JSON

Security Advisories

6

Active advisories

HIGH 3

MODERATE 3

View All maven Advisories

Package Information

Description:

Storm Core Java API and Clojure implementation.

Repository:	https://github.com/apache/storm
Homepage:	https://storm.apache.org
Latest Release:	`2.8.1` about 1 year ago
Dependent Repos:	1,756
Dependent Packages:	190
Ranking:	Top 0.2663% by dependent repos Top 0.4003% by dependent pkgs

PR Status

Open 3 (33.3%)

Merged 2 (22.2%)

Closed 3 (33.3%)

PR Types

Major 2 (22.2%)

Minor 2 (22.2%)

Patch 4 (44.4%)