666 matches found
PT-2026-93418
Name of the Vulnerable Software and Affected Versions Apache ZooKeeper versions 3.8.0 through 3.8.6 Apache ZooKeeper versions 3.9.0 through 3.9.5 Description An unauthenticated attacker can inject arbitrary fake log lines into the operational log by sending a crafted add auth"ensemble", ... reque...
PT-2026-93406
Name of the Vulnerable Software and Affected Versions Apache ZooKeeper versions prior to 3.9.6 Apache ZooKeeper versions prior to 3.8.7 Description An information disclosure issue exists due to a missing Access Control List ACL check during the SetWatches reconnect replay. An attacker can discove...
PT-2026-93415
Name of the Vulnerable Software and Affected Versions Apache ZooKeeper versions 3.9.0 through 3.9.5 Apache ZooKeeper versions 3.8.0 through 3.8.6 Description An authorization bypass exists where the deleteContainer opcode 0x14/20 is processed without verifying the caller's Access Control List ACL...
CVE-2026-79993: Missing Authorization
The deleteContainer opcode 0x14/20 is processed without verifying the caller's ACL permissions, allowing any authenticated client to delete specific znodes in the data tree regardless of the ACL restrictions on the znode or its parent. This opcode is considered internal-only and the official clie...
CVE-2026-84439: Improper Output Neutralization for Logs
When audit logging is enabled zookeeper.audit.enable=true, an unauthenticated attacker can inject arbitrary fields into Apache ZooKeeper's audit log by sending a digest authentication request with tab characters \t embedded in the username. Because the audit log uses tab-separated key=value forma...
CLEANSTART-2026-ZI25974 In Eclipse Jetty, the HTTP/1
Multiple security vulnerabilities affect the apache-zookeeper package. In Eclipse Jetty, the HTTP/1. See references for individual vulnerability details...
CLEANSTART-2026-BA42566 In Eclipse Jetty, the HTTP/1
Multiple security vulnerabilities affect the apache-zookeeper package. In Eclipse Jetty, the HTTP/1. See references for individual vulnerability details...
CLEANSTART-2026-GH96150 Netty (io
Multiple security vulnerabilities affect the apache-zookeeper package. Netty io. See references for individual vulnerability details...
CLEANSTART-2026-VJ90703 Security fixes for ghsa-72hv-8253-57qq, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r0, 3.9.4-r6
Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZI18123 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4
Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-95722
Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-PZ89066 In Eclipse Jetty, the HTTP/1
Multiple security vulnerabilities affect the apache-zookeeper package. In Eclipse Jetty, the HTTP/1. See references for individual vulnerability details...
CLEANSTART-2026-LB53225 Netty (io
Multiple security vulnerabilities affect the apache-zookeeper package. Netty io. See references for individual vulnerability details...
CLEANSTART-2026-CX26815 Security fixes in apache-zookeeper 3.8.6-r5
Package apache-zookeeper version 3.8.6-r5 fixes 4 vulnerabilities: ghsa-r7wm-3cxj-wff9, CVE-2026-54515, CVE-2026-59889, ghsa-mhm7-754m-9p8w...
CLEANSTART-2026-NP03031 Security fixes in apache-zookeeper 3.9.5-r5
Package apache-zookeeper version 3.9.5-r5 fixes 4 vulnerabilities: ghsa-r7wm-3cxj-wff9, CVE-2026-54515, CVE-2026-59889, ghsa-mhm7-754m-9p8w...
CLEANSTART-2026-GI37679 Security fixes in apache-zookeeper 3.6.4-r4
Package apache-zookeeper version 3.6.4-r4 fixes 1 vulnerabilities: ghsa-72hv-8253-57qq...
CLEANSTART-2026-RW73729 Security fixes in apache-zookeeper 3.7.2-r4
Package apache-zookeeper version 3.7.2-r4 fixes 6 vulnerabilities: CVE-2026-25210, CVE-2025-13151, CVE-2026-24515, CVE-2026-22695, CVE-2026-22801...
CLEANSTART-2026-SH25636 Security fixes in apache-zookeeper 3.9.4-r6
Package apache-zookeeper version 3.9.4-r6 fixes 1 vulnerabilities: ghsa-72hv-8253-57qq...