{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:05db5ada-a4fd-5d26-a26b-893a2f77ff90", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "zookeeper", "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1", "type": "library", "group": "org.apache.zookeeper", "bom-ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1", "version": "3.5.7-tuxcare.1", "pedigree": { "ancestors": [ { "name": "zookeeper", "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7", "type": "library", "group": "org.apache.zookeeper", "version": "3.5.7" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2017-5637", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:bffd4146-5abc-537d-b52a-310d6c1154d1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5637 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2018-8012", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:ac663aff-26e4-5a95-8a82-6928085d2dd5", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-8012 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2019-0201", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:6bc69101-d7b9-5d5c-a9b0-8ef8e058cf25", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0201 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2023-44981", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:a109f23e-15a8-5185-af21-1959a34c3481", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44981 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2024-23944", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:a22f31ef-2d37-5f8d-b0fd-533d1c9af909", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-23944 does not affect version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper. not_affected \u2014 Version 3.5.7 is NOT AFFECTED by CVE-2024-23944. The vulnerability requires the persistent watcher feature (addWatch command) introduced in ZooKeeper 3.6.0, which is absent in 3.5.7. While the underlying watch event delivery mechanism lacks ACL checks in 3.5.7 (same as vulnerable versions), the specific attack vector described in the CVE\u2014continuous monitoring via persistent watchers\u2014cannot be e...", "justification": "code_not_present" } }, { "id": "CVE-2024-51504", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:19dfef6f-18d2-5f31-8b15-194512785dbc", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-51504 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2025-58457", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:4f46a002-f61a-596b-b389-a1d7fa9a2ea8", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58457 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-24281", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:e7117d09-45ce-5d1e-9ce4-2a5182bca3ad", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24281 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-24308", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:4fa22cc7-ee1d-5ddf-9079-113c4c35e467", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24308 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-59739", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:4fd20655-912c-517b-b066-9458962aa358", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59739 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-59969", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:45903dd3-3fb4-5301-a06e-1afa11575931", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59969 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-79993", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:86138ed9-be77-5f71-a629-a721c1246e87", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-79993 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-84439", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:71c779f5-b25a-5d65-b8bb-233f723f67fe", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84439 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-84501", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ], "bom-ref": "urn:uuid:b9e5d4b8-3779-5e74-8af7-1cc9c532832b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84501 affects version 3.5.7-tuxcare.1 of org.apache.zookeeper:zookeeper." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.7-tuxcare.1" } ] }