Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.zookeeper/zookeeper@3.6.0
purl pkg:maven/org.apache.zookeeper/zookeeper@3.6.0
Next non-vulnerable version 3.8.6
Latest non-vulnerable version 3.9.5
Risk score 4.1
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-7286-pgfv-vxvh
Aliases:
CVE-2023-44981
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the …
3.7.2
Vulnerable
GHSA-r978-9m6m-6gm6
Aliases:
CVE-2024-23944
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling Information disclosure in persistent watchers handling in Apache ZooKeeper due …
3.8.4
Vulnerable
3.9.2
Vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2021-21409
Inconsistent Interpretation of HTTP Requests (HTTP Request Smuggling) Netty is an open-source, asynchronous event-driven network application framework for rapid development … GHSA-f256-j965-7f32
CVE-2021-28169
Exposure of Sensitive Information to an Unauthorized Actor It is possible for requests to the `ConcatServlet` with a doubly encoded … GHSA-gwcr-j4wh-j3cq