elasticsearch-8.15-advanced-compat

Direct Vulnerabilities

Known vulnerabilities in the elasticsearch-8.15-advanced-compat package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2026-102407	*
L CVE-2026-102404	*
L CVE-2026-102411	*
L CVE-2026-103005	*
L CVE-2026-103008	*
L CVE-2026-103009	*
L CVE-2026-103006	*
L CVE-2026-94408	*
L CVE-2026-94399	*
L CVE-2026-94398	*
L CVE-2026-82300	*
L CVE-2026-82294	*
L CVE-2026-94397	*
L CVE-2026-56143	*
L CVE-2026-72649	*
H CVE-2026-78607	*
M CVE-2026-56144	*
L CVE-2026-63263	*
L CVE-2026-63136	*
L CVE-2026-63140	*
L CVE-2026-63144	*
L CVE-2026-56145	*
L CVE-2026-72638	*
L CVE-2026-72687	*
L CVE-2026-72636	*
L CVE-2026-72656	*
L CVE-2026-72686	*
L CVE-2026-72645	*
L CVE-2026-72685	*
L CVE-2026-72647	*
L CVE-2026-72684	*
L CVE-2026-72683	*
L CVE-2026-56148	*
L CVE-2026-56149	*
L Resource Exhaustion	*
C Improper Input Validation	*
H HTTP Response Splitting	*
H HTTP Request Smuggling	*
L Integer Overflow or Wraparound	*
C HTTP Request Smuggling	*
C HTTP Request Smuggling	*
L Resource Exhaustion	*
L CRLF Injection	*
L CVE-2026-5598	*
L CVE-2026-0636	*
L CVE-2026-5588	*
H Improper Neutralization	*
M Improper Validation of Certificate with Host Mismatch	*
H Improper Encoding or Escaping of Output	*
H Improper Encoding or Escaping of Output	*
L HTTP Request Smuggling	*
H Allocation of Resources Without Limits or Throttling	*
L GHSA-72hv-8253-57qq	*
L CRLF Injection	*
M Improper Certificate Validation	*
L CVE-2025-8885	*
M Resource Exhaustion	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
C XML External Entity (XXE) Injection	*
L CVE-2025-68390	*
L Uncontrolled Recursion	*
L CVE-2025-37727	*
H HTTP Request Smuggling	*
L CVE-2025-31672	*
H CVE-2023-52428	*
H CVE-2025-37731	*
H Uncontrolled Recursion	*
L XML External Entity (XXE) Injection	*
L CVE-2025-8916	*
L CVE-2025-22227	*
L Uncontrolled Recursion	*
H CVE-2024-52979	*
L CVE-2024-29857	*
H Allocation of Resources Without Limits or Throttling	*
L CVE-2025-68384	*
L CVE-2025-24970	*

elasticsearch-8.15-advanced-compat

Direct Vulnerabilities

Fix vulnerabilities automatically