{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:ab189798-04cd-5ed2-8a38-e42acb967a7b", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "zookeeper", "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1", "type": "library", "group": "org.apache.zookeeper", "bom-ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1", "version": "3.5.9-tuxcare.1", "pedigree": { "ancestors": [ { "name": "zookeeper", "purl": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9", "type": "library", "group": "org.apache.zookeeper", "version": "3.5.9" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2017-5637", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:824a56ee-9621-524a-8c1e-eb186e55718f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2017-5637 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2018-8012", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:17bc234c-2333-5543-ab79-30cbc2635936", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-8012 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2019-0201", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:23d76aec-c867-5972-b628-ab07a8fbf5b6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-0201 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2023-44981", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:5db76f14-3e94-55b7-bcaf-2783f208c81f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-44981 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2024-23944", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:de3ef8ab-253c-51f0-9d2c-1077607b474a", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2024-23944 does not affect version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper. not_affected \u2014 ZooKeeper 3.5.9 is NOT AFFECTED by CVE-2024-23944. The vulnerability requires persistent watchers (addWatch command with PERSISTENT_RECURSIVE mode) to expose child znode paths without ACL checks. Persistent watchers were introduced in ZooKeeper 3.6.0 (ZOOKEEPER-1416) and do not exist in 3.5.9. Regular watchers in 3.5.9 cannot achieve the same information disclosure because they only expose the ...", "justification": "code_not_present" } }, { "id": "CVE-2024-51504", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:b3014e2e-5917-5a53-b16f-4441c900b80d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-51504 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2025-58457", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:b0e37f92-762c-5d97-b2ab-4dad910aecf3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-58457 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-24281", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:1e785db2-1bf6-5d11-a431-43c228a8c90d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24281 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-24308", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:ff9516f3-bcfe-5d47-8b60-c078e79dc43e", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-24308 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-59739", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:3cb92676-516f-582c-b02d-83530c8128d9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59739 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-59969", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:ec2dcbe1-a8eb-5934-9153-aef81c7ff8d7", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-59969 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-79993", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:460fdd35-30c8-5cae-a10e-21cbb5c15674", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-79993 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-84439", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:8a05adcc-e5a5-53c6-8262-a4a7cb4e7eee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84439 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } }, { "id": "CVE-2026-84501", "affects": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ], "bom-ref": "urn:uuid:95af9043-b7ce-5e4a-8a88-1ce67b922bf2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2026-84501 affects version 3.5.9-tuxcare.1 of org.apache.zookeeper:zookeeper." } } ], "dependencies": [ { "ref": "pkg:maven/org.apache.zookeeper/zookeeper@3.5.9-tuxcare.1" } ] }