{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:91c56d6b-bd9f-56da-8a34-32e089f0561c", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "zookeeper", "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1", "type": "library", "group": "org.apache.zookeeper", "bom-ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1", "version": "3.5.6-tuxcare.1", "pedigree": { "ancestors": [ { "name": "zookeeper", "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6", "type": "library", "group": "org.apache.zookeeper", "version": "3.5.6" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2017-5637", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:61749c5b-d13b-5627-bdeb-22fc4b8630e2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5637 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2018-8012", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:e687bdde-ec55-5d18-8cf3-c809f26fb9d6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-8012 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2019-0201", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:f94886c8-8a8e-5227-ad65-612c8106aa81", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0201 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2023-44981", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:017111c9-fe6d-56a1-abcc-97e56cee3497", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44981 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2024-23944", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:3333074e-b88c-5402-8db3-2896a742a204", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-23944 does not affect version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper. not_affected \u2014 ZooKeeper version 3.5.6 is not affected by CVE-2024-23944. The vulnerability specifically targets persistent watchers (addWatch command with PERSISTENT/PERSISTENT_RECURSIVE modes), which were introduced in ZooKeeper 3.6.0. Version 3.5.6 predates this feature and does not contain the vulnerable code path. The target repository has no addWatch operation code, no AddWatchMode enum, and no persiste...", "justification": "code_not_present" } }, { "id": "CVE-2024-51504", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:c5f75961-cdf7-5fb7-9414-9dda30c5b896", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-51504 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2025-58457", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:d611ac33-e4ab-50a7-8957-4ac9c0e71f97", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58457 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-24281", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:45d6c330-e5c4-583d-b273-6de55c6a7aaa", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24281 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-24308", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:0b59a95a-e246-5ad5-aa4b-1bb264007c7e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24308 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-59739", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:81e3b446-985c-5289-9f6d-54f0e9724a1e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59739 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-59969", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:8f91440d-7cb9-5095-bde2-e21a84bf40e3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59969 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-79993", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:157fdee5-b9c9-5714-bc37-9c48fc4dfcb4", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-79993 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-84439", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:b7d4e711-25c3-562c-9d83-127ffd68cc49", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84439 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-84501", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ], "bom-ref": "urn:uuid:6f548338-fc80-5c93-88d7-ea4b31fa16f9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84501 affects version 3.5.6-tuxcare.1 of org.apache.zookeeper:zookeeper." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.6-tuxcare.1" } ] }