CLEANSTART-2026-RI13630 LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files

Security vulnerability affects the apache-zookeeper package. LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files...

CLEANSTART-2026-KU65469 Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine

Security vulnerability affects the apache-zookeeper package. Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine...

CLEANSTART-2026-FJ86394 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)

Security vulnerability affects the apache-zookeeper package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...

CLEANSTART-2026-LU31702 In Eclipse Jetty, the HTTP/1

Security vulnerability affects the apache-zookeeper package. In Eclipse Jetty, the HTTP/1...

CLEANSTART-2026-BQ73969 jackson-databind's deserializer for java

Security vulnerability affects the apache-zookeeper package. jackson-databind's deserializer for java...

CLEANSTART-2026-HB03857 DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator

Security vulnerability affects the apache-zookeeper package. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator...

CLEANSTART-2026-IM74303 client may issue specially crafted HTTP/1

Security vulnerability affects the apache-zookeeper package. A client may issue specially crafted HTTP/1...

CLEANSTART-2026-IS00308 JLine is a Java library for handling console input

Security vulnerability affects the apache-zookeeper package. JLine is a Java library for handling console input...

CLEANSTART-2026-AA89451 JLine is a Java library for handling console input

Security vulnerability affects the apache-zookeeper package. JLine is a Java library for handling console input...

CLEANSTART-2026-JD77891 jackson-databind binds a JSON string to a javax

Security vulnerability affects the apache-zookeeper package. jackson-databind binds a JSON string to a javax...

CLEANSTART-2026-QN00727 UTF8DataInputJsonParser

Security vulnerability affects the apache-zookeeper package. UTF8DataInputJsonParser...

CLEANSTART-2026-AH69997 JLine is a Java library for handling console input

Security vulnerability affects the apache-zookeeper package. JLine is a Java library for handling console input...

CLEANSTART-2026-OY78254 TypeDeserializerBase

Security vulnerability affects the apache-zookeeper package. TypeDeserializerBase...

CLEANSTART-2026-XT22555 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID

Security vulnerability affects the apache-zookeeper package. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID...

CLEANSTART-2026-PG40177 NumberInput

Security vulnerability affects the apache-zookeeper package. NumberInput...

zookeeper: Apache ZooKeeper: Unauthorized znode deletion via missing ACL check

A flaw was found in Apache ZooKeeper. The deleteContainer opcode is processed without verifying Access Control List ACL permissions. A remote, unauthenticated attacker with network access to the ZooKeeper client port can delete any empty persistent znode, including container and TTL nodes. This c...

CLEANSTART-2026-NB78178 Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments

CVE-2026-59969 affects multiple packages. Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. See references for individual vulnerability details...

CLEANSTART-2026-XR18271 unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble",

CVE-2026-84501 affects multiple packages. An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble",. See references for individual vulnerability details...

CLEANSTART-2026-PX58451 Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check

CVE-2026-59739 affects multiple packages. Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. See references for individual vulnerability details...

Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in Apache ZooKeeper

Summary IBM SPSS Modeler is affected by multiple vulnerabilities in Apache ZooKeeper. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-59739 DESCRIPTION: Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An...