{"action":"Upgrade org.apache.zookeeper:zookeeper to 3.8.6 (3.8.x) or 3.9.5 (3.9.x) or later.","affected":[{"fixed":"3.9.5","introduced":"3.9.0"},{"fixed":"3.8.6","introduced":"3.8.0"}],"component":"org.apache.zookeeper:zookeeper","cve_ids":["CVE-2026-24308"],"ecosystem":"Maven","epss":0.01197,"exploited":false,"fixed_versions":["3.9.5","3.8.6"],"ghsa_id":"GHSA-crhr-qqj8-rpxc","id":"tcs_01M5N8T76VCTRGR5V9PCAZ8X7J","modified_at":"2026-09-10T03:50:38.701178145Z","published_at":"2026-03-07T09:30:15Z","references":["https://osv.dev/vulnerability/GHSA-crhr-qqj8-rpxc","https://nvd.nist.gov/vuln/detail/CVE-2026-24308","https://github.com/apache/zookeeper","https://github.com/apache/zookeeper/releases/tag/release-3.8.6","https://github.com/apache/zookeeper/releases/tag/release-3.9.5","https://lists.apache.org/thread/qng3rtzv2pqkmko4rhv85jfplkyrgqdr","http://www.openwall.com/lists/oss-security/2026/03/07/5"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-crhr-qqj8-rpxc","url":"https://osv.dev/vulnerability/GHSA-crhr-qqj8-rpxc"},{"source":"nvd","source_id":"CVE-2026-24308","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-24308"}],"summary":"Apache ZooKeeper has improper handling of configuration values"}