CLEANSTART-2026-JM28284

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JM28284.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-JM28284

Upstream

CVE-2026-59739

Published

2026-10-07T00:36:23Z

Modified

2026-10-07T00:45:07Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check

Details

Security vulnerability affects the spark package. Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check.

References

Affected packages

CleanStart / spark

Package

Name: spark

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.5.9-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JM28284.json"