CLEANSTART-2026-TX47991 Security fixes for CVE-2025-13151, CVE-2026-22695, CVE-2026-22801, CVE-2026-24515, CVE-2026-25210, CVE-2026-25646, CVE-2026-42583, ghsa-72hv-8253-57qq, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r5, 3.9.4-r6, 3.9.5-r0, 3.9.5-r1

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN47804 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4

Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: cassandra-reaper, akhq, ranger, nacos-docker, thingsboard, management-api-for-apache-cassandra-5.0, nextflow, keycloak-config-cli, cassandra, zookeeper-fips, localstack, sonarqube, management-api-for-apache-cassandra-4.0, s3proxy, apache-nifi-registry, cassandra-fips...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, akhq, ranger, nacos-docker, thingsboard, management-api-for-apache-cassandra-5.0, nextflow, keycloak-config-cli, cassandra, zookeeper-fips, localstack, sonarqube, management-api-for-apache-cassandra-4.0, s3proxy, apache-nifi-registry, cassandra-fips...

CLEANSTART-2026-QC20347 Security fixes for CVE-2025-13151, CVE-2026-22695, CVE-2026-22801, CVE-2026-2332, CVE-2026-24515, CVE-2026-25210, CVE-2026-25646, ghsa-72hv-8253-57qq applied in versions: 3.7.2-r4, 3.7.2-r5, 3.7.2-r6

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KB52131 Security fixes for CVE-2025-13151, CVE-2026-22695, CVE-2026-22801, CVE-2026-24515, CVE-2026-25210, CVE-2026-25646, CVE-2026-42583, ghsa-72hv-8253-57qq, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r5, 3.9.4-r6, 3.9.5-r0, 3.9.5-r1

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AW54681 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4

Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AB08507 Security fixes for CVE-2026-42583, ghsa-72hv-8253-57qq, ghsa-mj4r-2hfc-f8p6 applied in versions: 3.8.6-r0, 3.8.6-r1

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DU71732 Security fixes for CVE-2026-42583, ghsa-72hv-8253-57qq, ghsa-mj4r-2hfc-f8p6 applied in versions: 3.8.6-r0, 3.8.6-r1

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WA05811 Security fixes for CVE-2025-13151, CVE-2026-22695, CVE-2026-22801, CVE-2026-24515, CVE-2026-25210, CVE-2026-25646, CVE-2026-42583, ghsa-72hv-8253-57qq, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r5, 3.9.4-r6, 3.9.5-r0, 3.9.5-r1

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NH93073 Security fixes for CVE-2025-13151, CVE-2026-22695, CVE-2026-22801, CVE-2026-2332, CVE-2026-24515, CVE-2026-25210, CVE-2026-25646, ghsa-72hv-8253-57qq applied in versions: 3.7.2-r4, 3.7.2-r5, 3.7.2-r6

Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XU53519 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.6.4-r4

Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-P47F-322F-WHFH vulnerabilities

Vulnerabilities for packages: cassandra-reaper, akhq, ranger, nacos-docker, ontop-fips, management-api-for-apache-cassandra-5.0, nextflow, keycloak-config-cli, cassandra, zookeeper-fips, localstack, sonarqube, management-api-for-apache-cassandra-4.0, s3proxy, cassandra-fips,...

CVE-2026-9828 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, akhq, ranger, nacos-docker, ontop-fips, management-api-for-apache-cassandra-5.0, nextflow, keycloak-config-cli, cassandra, zookeeper-fips, localstack, sonarqube, management-api-for-apache-cassandra-4.0, s3proxy, cassandra-fips,...

Apache ZooKeeper: Apache ZooKeeper: Impersonation of servers or clients via reverse DNS spoofing

A flaw was found in Apache ZooKeeper. The ZKTrustManager component's hostname verification process can fall back to reverse DNS PTR lookup when IP Subject Alternative Name SAN validation fails. This vulnerability allows an attacker who can control or spoof PTR records to impersonate ZooKeeper...

Apache ZooKeeper: Apache ZooKeeper: Information disclosure via improper handling of configuration values

A flaw was found in Apache ZooKeeper. Improper handling of configuration values in ZKConfig allows an attacker to expose sensitive information. This occurs when sensitive client configuration values are logged at an INFO level in the client's logfile. This vulnerability can lead to information...

GHSA-47QP-HQVX-6R3F vulnerabilities

Vulnerabilities for packages: tez, ranger, kafka, hadoop-fips, hadoop-client-modules, apache-hop-fips, confluent-kafka-jre-bcfips, zookeeper-fips, pinot-fips, confluent-kafka, spark-kubernetes-operator-fips, druid, apache-camel-karavan-devmode, apache-hop, pinot, zookeeper, kafka-fips,...

GHSA-2R2C-CX56-8933 vulnerabilities

Vulnerabilities for packages: tez, ranger, kafka, hadoop-fips, hadoop-client-modules, apache-hop-fips, confluent-kafka-jre-bcfips, zookeeper-fips, pinot-fips, confluent-kafka, spark-kubernetes-operator-fips, druid, apache-camel-karavan-devmode, apache-hop, pinot, zookeeper, kafka-fips,...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache ZooKeeper

Summary Multiple vulnerabilities in Apache ZooKeeper that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-24281 DESCRIPTION: Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing...

CVE-2026-11746

A vulnerability has been identified in centraldogma-server versions prior to 0.84.0, where enabling ZooKeeper replication without setting replication.secret causes the server to silently fall back to a hard-coded, publicly known secret. This default credential authenticates the embedded ZooKeeper...