CLEANSTART-2026-ZX51161: trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped
Security vulnerability affects the zookeeper-operator package. A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/zookeeper-operatorto a version that resolves this vulnerability.Fixed in 0.1.1-r0
Event History
Frequently Asked Questions
Does exploitation require attacker authentication or user interaction?
The supplied CVSS vector indicates no privileges are required (PR:N), but user interaction is required (UI:R). Exploitation is also tied to a previously written valid template from a trusted template author.
What impact is indicated if the issue is exploited?
The CVSS vector indicates low confidentiality and integrity impact, with no availability impact. It also indicates that the impact may extend beyond the initially affected security scope (S:C).
Which environments should be reviewed first?
Review deployments of cleanstart/zookeeper-operator that use templates written by trusted template authors, particularly templates containing the 'yield' keyword. The issue concerns cases where that keyword was not correctly escaped.