Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
Apache Zookeeper: libexpat Vulnerability in Apache Zookeeper
published 7 months ago
Summary
A security issue exists in the way Apache Zookeeper uses a third-party library called libexpat. This library has vulnerabilities that can be exploited, potentially allowing attackers to execute malicious code. Update to the latest version of Apache Zookeeper to fix the issue.
What to do
- Update cleanstart apache-zookeeper to version 3.7.2-r5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | apache-zookeeper |
< 3.7.2-r5 Fix: upgrade to 3.7.2-r5
|
Original advisory text
In libexpat before 2
Multiple security vulnerabilities affect the apache-zookeeper package. In libexpat before 2. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-13151 URL
- https://osv.dev/vulnerability/CVE-2026-22695 URL
- https://osv.dev/vulnerability/CVE-2026-22801 URL
- https://osv.dev/vulnerability/CVE-2026-24515 URL
- https://osv.dev/vulnerability/CVE-2026-25210 URL
- https://osv.dev/vulnerability/ghsa-72hv-8253-57qq URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-13151 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-22695 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-22801 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-24515 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25210 URL
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published7 Apr 2026
Updated9 Apr 2026
First seen9 Apr 2026
Sources
CLEANSTART-2026-DP59378 · OSV
Track software like this
Free during beta