logstash-8 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the logstash-8 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
C CVE-2026-8763	*
H CVE-2026-13506	*
L Allocation of Resources Without Limits or Throttling	*
H Algorithmic Complexity	*
C Improper Check for Unusual or Exceptional Conditions	*
L Interpretation Conflict	*
L Uncontrolled Memory Allocation	*
L Improper Input Validation	*
L Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	*
L Uncontrolled Recursion	*
L Improper Certificate Validation	*
L Improper Input Validation	*
L Information Exposure Through Caching	*
L Improper Encoding or Escaping of Output	*
M Use After Free	*
L NULL Pointer Dereference	*
L Heap-based Buffer Overflow	*
H Resource Exhaustion	*
L Resource Exhaustion	*
H Allocation of Resources Without Limits or Throttling	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H HTTP Request Smuggling	*
L Resource Exhaustion	*
M CRLF Injection	*
L Improper Access Control	*
L GHSA-r7wm-3cxj-wff9	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
L CVE-2025-14813	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
L Server-Side Request Forgery (SSRF)	*
L Incomplete Blacklist	*
L Incomplete Blacklist	*
L GHSA-5prr-v3j2-97mh	*
L GHSA-p67v-3w7g-wjg7	*
L GHSA-wfpw-mmfh-qq69	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
L GHSA-wjv4-x9w8-wm3h	*
L GHSA-8678-w3jw-xfc2	*
L Uncontrolled Recursion	*
L CVE-2026-54905	*
L Missing Lock Check	*
L GHSA-phwj-rprq-35pp	*
L GHSA-5v8h-3h3q-446p	*
L GHSA-9cv2-cfxc-v4v2	*
L HTTP Request Smuggling	*
L Improper Verification of Cryptographic Signature	*
L Arbitrary Command Injection	*
L Improper Neutralization	*
L Arbitrary Command Injection	*
L Allocation of Resources Without Limits or Throttling	*
L Improper Access Control	*
L Resource Exhaustion	*
L Authentication Bypass	*
L CVE-2025-12183	*
L Information Exposure	*
L Improper Authentication	*
M Server-Side Request Forgery (SSRF)	*

Vulnerability

Vulnerable Version

CVE-2026-8763