CVE-2026-82434: Apache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to Logs

<p>Posted by Richard Zowalla on Sep 13</p>Severity: <br /> <br /> Affected versions:<br /> <br /> - Apache Storm Nimbus (org.apache.storm:storm-server) 3.0.0 before 3.1.0<br /> - Apache Storm Client (org.apache.storm:storm-client) 3.0.0 before 3.1.0<br /> <br /> Description:<br /> <br /> Description<br /> <br /> When ZooKeeper authentication is configured, Storm deliberately retains<br /> `storm.z