Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-mm3m-5497-xggg
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch Uncontrolled Resource Consumption Vulnerability 01 May 2025
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-5xm9-x7x4-4j5x
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch Vulnerable to Stack Overflow due to a Large Recursion 08 Apr 2025
  • Fix available
  • Severity - 4.9 (Medium)
GHSA-jgx4-7v3v-vwfm
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch allocation of resources without limits or throttling leads to crash 21 Jan 2025
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-5mpw-4546-2wcr
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch Incorrect Authorization vulnerability 17 Dec 2024
  • Fix available
  • Severity - 6.0 (Medium)
GHSA-5v8f-xx9m-wj44
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch stores private key on disk unencrypted 31 Jul 2024
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-2hjr-vmf3-xwvp
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch Insertion of Sensitive Information into Log File 26 Jul 2024
  • Fix available
  • Severity - 4.1 (Medium)
GHSA-4q22-422g-m4pj
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch StackOverflow vulnerability 13 Jun 2024
  • Fix available
  • Severity - 4.9 (Medium)
GHSA-pw39-f3m5-cxfc
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch Uncaught Exception leading to crash 29 Mar 2024
  • Fix available
  • Severity - 4.3 (Medium)
GHSA-r3hx-qfh5-r9m7
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch Incorrect Authorization vulnerability 27 Mar 2024
  • Fix available
  • Severity - 4.4 (Medium)
GHSA-w5gg-2q56-6h4f
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch Uncontrolled Resource Consumption vulnerability 27 Mar 2024
  • Fix available
  • Severity - 4.9 (Medium)
GHSA-285m-vhfq-xx4h
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch Improper Handling of Exceptional Conditions 22 Nov 2023
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-2cqf-6xv9-f22w
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch vulnerable to Uncontrolled Resource Consumption 26 Oct 2023
  • Fix available
  • Severity - 7.5 (High)
GHSA-99pc-69q9-jxf2
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch allows insertion of sensitive information into log files when using deprecated URIs 26 Oct 2023
  • Fix available
  • Severity - 4.1 (Medium)
GHSA-qwrx-45xf-jjf7
  • Maven/org.elasticsearch:elasticsearch
Elasticsearch vulnerable to stack overflow in the search API 26 Oct 2023
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-wh6w-69xc-5rq5
  • Maven/org.elasticsearch:elasticsearch
Improper Check for Unusual or Exceptional Conditions in Elasticsearch 07 Jun 2022
  • Fix available
  • Severity - 7.5 (High)
GHSA-hr65-qq6p-87r4
  • Maven/org.elasticsearch:elasticsearch
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch 24 May 2022
  • Fix available
  • Severity - 5.3 (Medium)