CVE-2026-84439 Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache ZooKeeper",
    "collectionURL": "https://repo.maven.apache.org/maven2",
    "packageName": "org.apache.zookeeper:zookeeper",
    "packageURL": "pkg:maven/org.apache.zookeeper/zookeeper",
    "versions": [
      {
        "status": "affected",
        "version": "3.9.0",
        "lessThanOrEqual": "3.9.5",
        "versionType": "maven"
      },
      {
        "status": "affected",
        "version": "3.8.0",
        "lessThanOrEqual": "3.8.6",
        "versionType": "maven"
      }
    ],
    "defaultStatus": "unaffected"
  }
]