CVE-2026-40983: Hazelcast Nearcachestats Nullable Dereference

`getNearCacheStats()` returns a `@Nullable` object. Dereferencing it directly without a null check or `Objects.requireNonNull` can lead to NullPointerException, especially in delayed execution contexts like metric gauge callbacks where the state may have changed since registration.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Java
greprules fetch cve-2026-40983-hazelcast-nearcachestats-nullable-dereference --engine opengrep

Description

`getNearCacheStats()` returns a `@Nullable` object. Dereferencing it directly without a null check or `Objects.requireNonNull` can lead to NullPointerException, especially in delayed execution contexts like metric gauge callbacks where the state may have changed since registration.