Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.zookeeper/zookeeper@3.5.9
purl pkg:maven/org.apache.zookeeper/zookeeper@3.5.9
Next non-vulnerable version 3.8.6
Latest non-vulnerable version 3.9.5
Risk score 4.1
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-7286-pgfv-vxvh
Aliases:
CVE-2023-44981
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the …
3.7.2
Vulnerable
CVE-2021-28169
Aliases:
GHSA-gwcr-j4wh-j3cq
Exposure of Sensitive Information to an Unauthorized Actor It is possible for requests to the `ConcatServlet` with a doubly encoded …
3.6.0
Vulnerable
3.6.0
Vulnerable
CVE-2021-21295
Aliases:
GHSA-wm47-8v5p-wjpj
Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Netty is an open-source, asynchronous event-driven network application framework for rapid development …
3.5.10
Vulnerable
3.5.10
Vulnerable
This package is not known to fix any advisories.