logstash-9.2

Direct Vulnerabilities

Known vulnerabilities in the logstash-9.2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L GHSA-6cx8-rjf8-pr8g	<9.2.8-r10
L GHSA-343h-94h5-c4wr	<9.2.8-r10
L GHSA-4v53-57pg-c464	<9.2.8-r10
L GHSA-gm45-99xc-r7wv	<9.2.8-r10
L Allocation of Resources Without Limits or Throttling	<9.2.8-r10
L GHSA-xx22-p4ch-683r	<9.2.8-r10
L Uncontrolled Memory Allocation	<9.2.8-r10
L GHSA-mcr4-qmvw-px4g	<9.2.8-r10
L Uncontrolled Recursion	<9.2.8-r10
L Uncontrolled Memory Allocation	<9.2.8-r10
L Time-of-check Time-of-use (TOCTOU)	<9.2.8-r10
L NULL Pointer Dereference	<9.2.8-r10
L Improper Input Validation	<9.2.8-r7
L Uncontrolled Recursion	<9.2.8-r7
L GHSA-5xwg-cfvj-gff5	<9.2.8-r7
L Improper Input Validation	<9.2.8-r7
L GHSA-68mj-5wr7-6fgg	<9.2.8-r7
L Uncontrolled Memory Allocation	<9.2.8-r7
L GHSA-jh4v-gfqj-7rhx	<9.2.8-r7
L GHSA-93j5-89vc-pph4	<9.2.8-r7
L Allocation of Resources Without Limits or Throttling	<9.2.8-r7
L GHSA-qx7j-jv8m-fppr	<9.2.8-r7
L Improper Certificate Validation	<9.2.8-r7
L GHSA-5m9f-rphj-c435	<9.2.8-r7
L GHSA-6g32-pxv4-2wfj	<9.2.8-r7
L Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	<9.2.8-r7
M CRLF Injection	<9.2.8-r6
L GHSA-jppx-w49h-x2qq	<9.2.8-r6
L HTTP Request Smuggling	<9.2.8-r6
L GHSA-3qp7-7mw8-wx86	<9.2.8-r6
H HTTP Request Smuggling	<9.2.8-r6
C Improper Check for Unusual or Exceptional Conditions	<9.2.8-r6
L GHSA-558v-64gr-wgg4	<9.2.8-r6
L GHSA-fccg-mwvh-qqg4	<9.2.8-r6
L GHSA-c4c3-7fpv-j4q5	<9.2.8-r6
H Loop with Unreachable Exit Condition ('Infinite Loop')	<9.2.8-r6
L GHSA-6cqp-g7gg-8hr5	<9.2.8-r6
L Resource Exhaustion	<9.2.8-r6
L Improper Access Control	<9.2.8-r6
L GHSA-x4gw-5cx5-pgmh	<9.2.8-r6
L GHSA-hvcg-qmg6-jm4c	<9.2.8-r6
L GHSA-c653-97m9-rcg9	<9.2.8-r6
H Resource Exhaustion	<9.2.8-r6
L Allocation of Resources Without Limits or Throttling	<9.2.8-r6
L GHSA-6jqx-86gh-f27w	<9.2.8-r6
L Improper Verification of Cryptographic Signature	<9.2.8-r6
L Improper Access Control	<9.2.8-r6
H Allocation of Resources Without Limits or Throttling	<9.2.8-r6
L GHSA-q4f6-jm68-57ww	<9.2.8-r6
H Information Exposure Through Caching	<9.2.8-r6
L GHSA-8c42-7qj2-3j46	<9.2.8-r6
L GHSA-mvh2-crg5-v77c	<9.2.8-r6
L Resource Exhaustion	<9.2.8-r6
L GHSA-gcjf-9mgh-3p7g	<9.2.8-r6
L GHSA-4mp9-239f-g9hg	<9.2.8-r6
H Algorithmic Complexity	<9.2.8-r6
L CVE-2026-18401	<9.2.8-r0
L GHSA-6qm2-mcq7-53qp	<9.2.8-r0
L Heap-based Buffer Overflow	<9.2.8-r5
L GHSA-x2f5-4prf-w687	<9.2.8-r5
H Improper Encoding or Escaping of Output	<9.2.8-r2
L GHSA-p93r-85wp-75v3	<9.2.8-r4
H Missing Report of Error Condition	<9.2.8-r3
H Algorithmic Complexity	<9.2.8-r3
M Arbitrary Command Injection	<9.2.8-r3
L GHSA-vcgp-9326-pqcp	<9.2.8-r3
L GHSA-75xq-5h9v-w6px	<9.2.8-r3
L CVE-2026-5598	<9.2.8-r4
L GHSA-hm49-wcqc-g2xg	<9.2.8-r3
L GHSA-h383-gmxw-35v2	<9.2.8-r2
L GHSA-q2mw-fvj9-vvcw	<9.2.8-r3
C Arbitrary Command Injection	<9.2.8-r3
M Server-Side Request Forgery (SSRF)	<9.2.8-r4
L GHSA-f6hv-jmp6-3vwv	<9.2.8-r4
C HTTP Request Smuggling	<9.2.8-r4
H HTTP Request Smuggling	<9.2.8-r4
L Resource Exhaustion	<9.2.8-r4
L GHSA-mj4r-2hfc-f8p6	<9.2.8-r4
L GHSA-xxqh-mfjm-7mv9	<9.2.8-r4
L Resource Exhaustion	<9.2.8-r4
L GHSA-5rv5-xj5j-3484	<9.2.8-r4
L GHSA-v8h7-rr48-vmmv	<9.2.8-r4
L Integer Overflow or Wraparound	<9.2.8-r4
L GHSA-57rv-r2g8-2cj3	<9.2.8-r4
L GHSA-38f8-5428-x5cv	<9.2.8-r4
L GHSA-m4cv-j2px-7723	<9.2.8-r4
L CRLF Injection	<9.2.8-r4
C HTTP Request Smuggling	<9.2.8-r4
M Allocation of Resources Without Limits or Throttling	<9.2.8-r3
L GHSA-87pf-fpwv-p7m7	<9.2.8-r3
L GHSA-v6x5-cg8r-vv6x	<9.2.8-r2
L Resource Exhaustion	<9.2.8-r2
H Permissive Regular Expression	<9.2.8-r2
L Inefficient Regular Expression Complexity	<9.2.8-r2
H Improper Output Neutralization for Logs	<9.2.8-r2
L GHSA-q4qf-9j86-f5mh	<9.2.8-r2
L GHSA-6hg6-v5c8-fphq	<9.2.8-r2
L GHSA-5qcv-4rpc-jp93	<9.2.8-r2
L GHSA-v569-hp3g-36wr	<9.2.8-r2
L GHSA-3pxv-7cmr-fjr4	<9.2.8-r2
L GHSA-h2jq-g4cq-5ppq	<9.2.8-r2
C Improper Authentication	<9.2.8-r2
M Interpretation Conflict	<9.2.8-r2
L GHSA-vgpv-f759-9wx3	<9.2.8-r2
M Interpretation Conflict	<9.2.8-r2
L Resource Exhaustion	<9.2.8-r2
H Improper Encoding or Escaping of Output	<9.2.8-r2
L Race Condition	<9.2.8-r2
L Permissive Regular Expression	<9.2.8-r2
L GHSA-445c-vh5m-36rj	<9.2.8-r2
M Improper Validation of Certificate with Host Mismatch	<9.2.8-r2
L GHSA-q2ww-5357-x388	<9.2.8-r2
L GHSA-qfgr-crr9-7r49	<9.2.8-r2
L GHSA-x8cg-fq8g-mxfx	<9.2.8-r2
L GHSA-33qg-7wpp-89cq	<9.2.8-r2
L Incorrect Behavior Order: Validate Before Canonicalize	<9.2.8-r2
L Partial Comparison	<9.2.8-r2
L GHSA-7mqq-6cf9-v2qp	<9.2.8-r2
L GHSA-g2pf-xv49-m2h5	<9.2.8-r2
L GHSA-8vqr-qjwx-82mw	<9.2.8-r2
H Resource Exhaustion	<9.2.8-r2
M Improper Handling of Length Parameter Inconsistency	<9.2.8-r2
M Improper Validation of Syntactic Correctness of Input	<9.2.8-r2
L GHSA-h27x-rffw-24p4	<9.2.8-r2
L GHSA-qv7j-4883-hwh7	<9.2.8-r2
H Resource Exhaustion	<9.2.8-r2
L GHSA-vc5p-v9hr-52mj	<9.2.7-r0
L GHSA-72hv-8253-57qq	<9.2.8-r0
M Improper Certificate Validation	<9.2.7-r0
L HTTP Request Smuggling	<9.2.8-r0
L GHSA-pwqr-wmgm-9rr8	<9.2.8-r0
L GHSA-3m6g-2423-7cp3	<9.2.7-r1
C Use of Externally-Controlled Format String	<9.2.7-r1
L GHSA-j288-q9x7-2f5v	<9.2.6-r3
L Uncontrolled Recursion	<9.2.6-r3
L Server-Side Request Forgery (SSRF)	<9.2.5-r1
L GHSA-33mh-2634-fwr2	<9.2.5-r1
L Cross-site Scripting (XSS)	<9.2.5-r1
L GHSA-mxw3-3hh2-x2mh	<9.2.5-r1
L Directory Traversal	<9.2.5-r1
L GHSA-whrj-4476-wvmp	<9.2.5-r1
L GHSA-rp46-r563-jrc7	<9.2.5-r0
L Arbitrary Code Injection	<9.2.5-r0
L GHSA-2xgq-q749-89fq	<9.2.3-r0
L CVE-2025-14762	<9.2.3-r0
L GHSA-84h7-rjj3-6jx4	<9.2.2-r1
L CRLF Injection	<9.2.2-r1

Vulnerability

Vulnerable Version

GHSA-6cx8-rjf8-pr8g

<9.2.8-r10