pkg:Maven/org.apache.zookeeper:zookeeper

All known vulnerabilities

• CRITICAL9.1CVE-2024-51504Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
  >= 3.9.0, < 3.9.3
• CRITICAL9.1CVE-2023-44981Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper
  from 0, < 3.7.2
• HIGH7.5CVE-2026-24308Apache ZooKeeper has improper handling of configuration values
  >= 3.9.0, < 3.9.5
• HIGH7.5Uncontrolled Resource Consumption in Apache ZooKeeper
  >= 3.4.0, < 3.4.10
• HIGH7.5Missing Authorization in Apache ZooKeeper
  from 0, < 3.4.10
• HIGH7.4Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager
  >= 3.8.0, < 3.8.6
• MEDIUM5.9Access control bypass in Apache ZooKeeper
  >= 1.0.0, < 3.4.14
• MEDIUM5.3Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling
  >= 3.8.0, < 3.8.4
• MEDIUM4.3Apache ZooKeeper: Insufficient Permission Check in AdminServer Snapshot/Restore Commands
  >= 3.9.0, < 3.9.4