CVE-2026-100302

A flaw was found in Apache ZooKeeper. An authenticated remote attacker can cause a Denial of Service DoS by submitting a request containing multiple bundled read operations for large data nodes. Because the multiRead handler does not restrict the cumulative response size generated in memory, the...