CVE-2026-82439: Apache Storm DRPC: Unauthenticated Unbounded Memory Growth in DRPC

<p>Posted by Richard Zowalla on Sep 13</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Storm DRPC (org.apache.storm:storm-server) 3.0.0 before 3.1.0<br /> <br /> Description:<br /> <br /> Description<br /> <br /> The DRPC server kept a map from function name to request queue and created an entry the first time a<br /> function name was seen. No code path ever removed