logstash-9.1-with-output-opensearch

Direct Vulnerabilities

Known vulnerabilities in the logstash-9.1-with-output-opensearch package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
C Improper Authentication	*
L Resource Exhaustion	*
M Improper Validation of Syntactic Correctness of Input	*
M Improper Handling of Length Parameter Inconsistency	*
M Interpretation Conflict	*
L Incorrect Behavior Order: Validate Before Canonicalize	*
M Interpretation Conflict	*
L Permissive Regular Expression	*
H Resource Exhaustion	*
H Permissive Regular Expression	*
L Inefficient Regular Expression Complexity	*
L Resource Exhaustion	*
L Partial Comparison	*
H Resource Exhaustion	*
H Improper Encoding or Escaping of Output	*
L CVE-2026-5588	*
L CVE-2026-0636	*
L Race Condition	*
L Improper Encoding or Escaping of Output	*
L Improper Validation of Certificate with Host Mismatch	*
L Protection Mechanism Failure	*
L Information Exposure Through Server Log Files	*
L CVE-2026-5598	*
H Access of Resource Using Incompatible Type ('Type Confusion')	<9.1.9-r0
C CVE-2026-27143	<9.1.9-r0
M Allocation of Resources Without Limits or Throttling	<9.1.9-r0
M Link Following	<9.1.9-r0
H Improper Certificate Validation	<9.1.9-r0
H Incorrect Authorization	<9.1.9-r0
L CVE-2026-32280	<9.1.9-r0
M Cross-site Scripting (XSS)	<9.1.9-r0
H Allocation of Resources Without Limits or Throttling	<9.1.9-r0
L GHSA-72hv-8253-57qq	*
L Directory Traversal	<9.1.9-r0
L Cross-site Scripting (XSS)	<9.1.9-r0
L Direct Request ('Forced Browsing')	<9.1.9-r0
L GHSA-wx95-c6cv-8532	*
L Arbitrary Code Injection	*
L Directory Traversal	*
L Cross-site Scripting (XSS)	*
L Server-Side Request Forgery (SSRF)	*
C CVE-2025-68121	<9.1.9-r0
L CVE-2025-61732	<9.1.9-r0
L Allocation of Resources Without Limits or Throttling	<9.1.9-r0
L CVE-2025-61730	<9.1.9-r0
L Allocation of Resources Without Limits or Throttling	<9.1.9-r0
L Out-of-bounds Write	<9.1.9-r0
L CVE-2025-61731	<9.1.9-r0
H Information Exposure	*
M Improper Certificate Validation	*
L CVE-2025-14762	*
L CRLF Injection	<9.1.9-r0
L Improper Certificate Validation	<9.1.8-r0
L Improper Certificate Validation	<9.1.8-r0
L Allocation of Resources Without Limits or Throttling	<9.1.6-r0
L CVE-2025-58186	<9.1.6-r0
L Allocation of Resources Without Limits or Throttling	<9.1.6-r0
L CVE-2025-47912	<9.1.6-r0
L Information Exposure Through Log Files	<9.1.6-r0
L Algorithmic Complexity	<9.1.6-r0
L CVE-2025-61725	<9.1.6-r0
L Allocation of Resources Without Limits or Throttling	<9.1.6-r0
L Improper Certificate Validation	<9.1.6-r0
L CVE-2025-58183	<9.1.6-r0
M Information Exposure	<9.1.6-r0
L Resource Exhaustion	<9.1.6-r0
L Resource Exhaustion	<9.1.6-r0
L Resource Exhaustion	<9.1.6-r0
H Inefficient Regular Expression Complexity	<9.1.9-r0
L Resource Exhaustion	<9.1.6-r0
M Improper Cross-boundary Removal of Sensitive Data	*
M Resource Exhaustion	*
H Improper Handling of Highly Compressed Data (Data Amplification)	<9.1.4-r0
H Allocation of Resources Without Limits or Throttling	*
H Inefficient Regular Expression Complexity	*

logstash-9.1-with-output-opensearch

Direct Vulnerabilities

Fix vulnerabilities automatically