Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.zookeeper/zookeeper@3.8.3
purl pkg:maven/org.apache.zookeeper/zookeeper@3.8.3
Next non-vulnerable version 3.8.6
Latest non-vulnerable version 3.9.5
Risk score 3.9
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-7xrh-hqfc-g7qr
Aliases:
CVE-2026-24281
Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager Hostname verification in Apache ZooKeeper ZKTrustManager falls back to …
3.8.6
Not vulnerable
GHSA-crhr-qqj8-rpxc
Aliases:
CVE-2026-24308
Apache ZooKeeper has improper handling of configuration values Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and …
3.8.6
Not vulnerable
GHSA-r978-9m6m-6gm6
Aliases:
CVE-2024-23944
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling Information disclosure in persistent watchers handling in Apache ZooKeeper due …
3.8.4
Vulnerable
3.9.2
Vulnerable
3.8.4
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-7286-pgfv-vxvh
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the … CVE-2023-44981