CVE-2026-100302

Allocation of Resources Without Limits or Throttling in the multiRead request handler of Apache ZooKeeper allows a remote attacker to crash the server denial of service with a single small request. The multiRead handler places no limit on the number of bundled read operations or on the cumulative...