Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-7xrh-hqfc-g7qr
  • Maven/org.apache.zookeeper:zookeeper
Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager 07 Mar
  • Fix available
  • Severity - 7.4 (High)
GHSA-crhr-qqj8-rpxc
  • Maven/org.apache.zookeeper:zookeeper
Apache ZooKeeper has improper handling of configuration values 07 Mar
  • Fix available
  • Severity - 8.7 (High)
GHSA-2hmj-97jw-28jh
  • Maven/org.apache.zookeeper:zookeeper
Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands 24 Sep 2025
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-g93m-8x6h-g5gv
  • Maven/org.apache.zookeeper:zookeeper
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server 07 Nov 2024
  • Fix available
  • Severity - 8.8 (High)
GHSA-r978-9m6m-6gm6
  • Maven/org.apache.zookeeper:zookeeper
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling 15 Mar 2024
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-7286-pgfv-vxvh
  • Maven/org.apache.zookeeper:zookeeper
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper 11 Oct 2023
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-7cwj-j333-x7f7
  • Maven/org.apache.zookeeper:zookeeper
Uncontrolled Resource Consumption in Apache ZooKeeper 13 May 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-ccqf-c5hq-77mp
  • Maven/org.apache.zookeeper:zookeeper
Missing Authorization in Apache ZooKeeper 13 May 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-2hw2-62cp-p9p7
  • Maven/org.apache.zookeeper:zookeeper
Access control bypass in Apache ZooKeeper 29 May 2019
  • Fix available
  • Severity - 5.9 (Medium)