Search for packages
| purl | pkg:maven/org.apache.zookeeper/zookeeper@3.9.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-2hmj-97jw-28jh
Aliases: CVE-2025-58457 |
Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands Improper permission checks in the AdminServer allow an authenticated client with … |
Vulnerable |
|
GHSA-g93m-8x6h-g5gv
Aliases: CVE-2024-51504 |
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server When using IPAuthenticationProvider in ZooKeeper Admin Server there is a … |
Vulnerable |
|
GHSA-7286-pgfv-vxvh
Aliases: CVE-2023-44981 |
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the … |
Vulnerable |
|
GHSA-7xrh-hqfc-g7qr
Aliases: CVE-2026-24281 |
Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager Hostname verification in Apache ZooKeeper ZKTrustManager falls back to … |
Not vulnerable |
|
GHSA-crhr-qqj8-rpxc
Aliases: CVE-2026-24308 |
Apache ZooKeeper has improper handling of configuration values Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and … |
Not vulnerable |
|
GHSA-r978-9m6m-6gm6
Aliases: CVE-2024-23944 |
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling Information disclosure in persistent watchers handling in Apache ZooKeeper due … |
Vulnerable Vulnerable |