https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T01:53:44.528380+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/certfr-2026-avi-1448 certfr-2026-avi-1448 — De multiples vulnérabilités ont été découvertes dans Apache Zookeeper. Elles permettent à un attaquant de provoquer un… 2026-11-05T01:53:44.558241+00:00 certfr-2026-avi-1448 https://db.gcve.eu/vuln/fkie_cve-2026-100300 fkie_cve-2026-100300 2026-11-05T01:53:44.558298+00:00

Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree — unauthenticated on default deployments, where that subtree is world-writable — to crash the server's critical request-processing thread and render the on-disk data directory permanently unbootable.

This issue affects Apache ZooKeeper up to and including 3.9.6. Users are recommended to upgrade to version 3.8.8 or 3.9.7, which fixes the issue.

 https://db.gcve.eu/vuln/ghsa-7xqw-mw2f-8c7x GHSA-7xqw-mw2f-8c7x 2026-11-05T01:53:44.558344+00:00

Improper handling of exceptional conditions in the quota subsystem of Apache ZooKeeper allows an attacker able to write under the /zookeeper/quota subtree — unauthenticated on default deployments, where that subtree is world-writable — to crash the server's critical request-processing thread and render the on-disk data directory permanently unbootable.

This issue affects Apache ZooKeeper up to and including 3.9.6. Users are recommended to upgrade to version 3.8.8 or 3.9.7, which fixes the issue.