CVE record · 1 source
CVE-2026-82440
Description Nimbus instantiates the class named by a topology's `topology.scheduler.strategy` when scheduling it.
- Vendor
- Apache Software Foundation
- Product
- Apache Storm Nimbus
- Weakness
- CWE-470
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Description Nimbus instantiates the class named by a topology's `topology.scheduler.strategy` when scheduling it.
Description Nimbus instantiates the class named by a topology's `topology.scheduler.strategy` when scheduling it. The allowlist intended to constrain that choice, `nimbus.scheduler.strategy.class.whitelist`, was treated as "allow…