Debian/zookeeper: high 7.5
Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an attacker to expose sensitive information stored in client configuration in the clie
Action: Upgrade zookeeper to 3.9.5-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.9.5-1 | - |
Fixed versions
| 3.9.5-1 |
Sources
- osv: DEBIAN-CVE-2026-24308#Debian:14/zookeeper
- https://security-tracker.debian.org/tracker/CVE-2026-24308
published · modified · JSON