VYPR

Nimbus

by Nimbus

CVEs (1)

  • CVE-2026-82441CriSep 14, 2026
    risk 0.59cvss 9.1epss 0.00

    Description A submitted topology carries two lists of blobstore keys, `dependency_jars` and `dependency_artifacts`, which the client fills in after uploading the corresponding blobs. Nimbus performed no validation of their contents on the submission path, yet acts on them in…