CVE-2026-82435: Apache Storm Worker: Unauthenticated Remote Memory Exhaustion in the Worker Messaging Decoder

<p>Posted by Richard Zowalla on Sep 13</p>Severity: important <br /> <br /> Affected versions:<br /> <br /> - Apache Storm Worker (org.apache.storm:storm-client) 3.0.0 before 3.1.0<br /> <br /> Description:<br /> <br /> Description<br /> <br /> The worker&apos;s Netty message decoder is installed ahead of the SASL authentication handlers in the pipeline<br /> and acts on frames before any authenti