Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.storm/storm@1.1
purl pkg:maven/org.apache.storm/storm@1.1
Next non-vulnerable version 1.1.1
Latest non-vulnerable version 2.2.1
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-x3qw-y2w4-r7bw
Aliases:
CVE-2017-9799
GHSA-x825-rjww-2245
Improper Access Control It was found that under some situations and configurations of Apache Storm, it is theoretically possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user. In the worst case this could lead to secure credentials of the other user being compromised.
1.1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:37:00.381446+00:00 GitLab Importer Affected by VCID-x3qw-y2w4-r7bw https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.storm/storm/CVE-2017-9799.yml 38.6.0