org.apache.storm:storm-client vulnerabilities (Maven)

2 vulnerabilities.

• org.apache.storm:storm-client Maven Apache Storm Client: Anonymous principal assigned on TLS client certificate verification failure CVE-2026-41081 Fix available 6.5 MediumApril 27, 2026
• org.apache.storm:storm-client Maven Apache Storm Client: RCE through Unsafe Deserialization via Kerberos TGT Credential Handling CVE-2026-35337 Fix available 8.8 HighApril 13, 2026