kibana-9.5 | Snyk

Direct Vulnerabilities

Known vulnerabilities in the kibana-9.5 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L CVE-2026-102406	<9.5.4-r0
L CVE-2026-18540	<9.5.5-r0
L GHSA-8m3c-c648-2xjj	<9.5.5-r0
L CVE-2026-19534	<9.5.5-r0
L GHSA-6vj9-mwq6-2f5v	<9.5.5-r0
L GHSA-c6fg-446q-cg94	<9.5.5-r0
H Inefficient Regular Expression Complexity	<9.5.5-r0
L CVE-2026-18149	<9.5.5-r0
L Server-Side Request Forgery (SSRF)	<9.5.5-r0
L GHSA-2x7j-588g-ccc2	<9.5.5-r0
L Uncontrolled Memory Allocation	<9.5.5-r0
H CVE-2026-85014	<9.5.5-r0
L CVE-2026-85024	<9.5.5-r0
L GHSA-rcw4-f5rp-g42v	<9.5.5-r0
L GHSA-cc9r-2j5m-2m83	<9.5.5-r0
L GHSA-r3ph-w7gj-g6xm	<9.5.5-r0
L GHSA-frvp-7c67-39w9	<9.5.5-r0
L CVE-2026-84394	<9.5.5-r0
L GHSA-wmmp-3585-3rmp	<9.5.5-r0
L CVE-2026-102412	<9.5.5-r0
L CVE-2026-84292	<9.5.5-r0
L Resource Exhaustion	<9.5.5-r0
L CVE-2026-86472	<9.5.5-r0
L GHSA-p634-w6r4-rjp2	<9.5.5-r0
M CVE-2026-84947	<9.5.5-r0
L CVE-2026-90711	<9.5.5-r0
L GHSA-8vvx-rff5-p5rq	<9.5.5-r0
H Out-of-bounds Write	<9.5.5-r0
L CVE-2026-84890	<9.5.5-r0
L GHSA-v53p-9fqp-m79j	<9.5.5-r0
L Incorrect Permission Assignment for Critical Resource	<9.5.5-r0
L GHSA-8238-w5pm-2374	<9.5.5-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<9.5.5-r0
C CVE-2026-84961	<9.5.5-r0
L Unchecked Input for Loop Condition	<9.5.5-r0
H CVE-2026-84933	<9.5.5-r0
L CVE-2026-2739	<9.5.5-r0
L Insufficient Comparison	<9.5.5-r0
L CVE-2026-17495	<9.5.5-r0
L Resource Exhaustion	<9.5.5-r0
M CVE-2026-85008	<9.5.5-r0
M Link Following	<9.5.5-r0
L CVE-2026-78582	<9.5.3-r0
L CVE-2026-94400	<9.5.3-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<9.5.4-r0
L Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<9.5.4-r0
L CVE-2026-82562	<9.5.4-r0
L Directory Traversal	<9.5.4-r0
L CVE-2026-82417	<9.5.4-r0
L GHSA-55q2-fjhq-7xh7	<9.5.4-r0
L HTTP Request Smuggling	<9.5.4-r0
L Resource Exhaustion	<9.5.4-r0
L GHSA-c2j3-45gr-mqc4	<9.5.4-r0
L CVE-2026-82299	<9.5.3-r0
L CVE-2026-82302	<9.5.3-r0
L CVE-2026-78595	<9.5.3-r0
L CVE-2026-78593	<9.5.3-r0
L CVE-2026-78596	<9.5.3-r0
L CVE-2026-78583	<9.5.3-r0
L CVE-2026-82298	<9.5.3-r0
L CVE-2026-82293	<9.5.2-r0
L CVE-2026-75899	<9.5.3-r0
L CVE-2026-75975	<9.5.3-r0
L GHSA-5p4m-2wfm-xmqj	<9.5.3-r0
L CVE-2026-76172	<9.5.3-r0
L CVE-2026-75931	<9.5.3-r0
L CVE-2026-72633	<9.5.2-r0
L CVE-2026-72628	<9.5.2-r0
L CVE-2026-72644	<9.5.1-r0
L CVE-2026-78603	<9.5.1-r0
L CVE-2026-72641	<9.5.1-r0
L CVE-2026-63138	<9.5.1-r0
L CVE-2026-72654	<9.5.2-r0
L CVE-2026-78608	<9.5.2-r0
L CVE-2026-78606	<9.5.2-r0
L GHSA-p6gq-j5cr-w38f	<9.5.2-r0
H CVE-2026-14643	<9.5.2-r0
L Algorithmic Complexity	<9.5.2-r0
M CVE-2026-15157	<9.5.2-r0
L GHSA-wqvq-jvpq-h66f	<9.5.2-r0
L Information Exposure	<9.5.2-r0
L Inefficient Regular Expression Complexity	<9.5.2-r0
L Resource Exhaustion	<9.5.2-r0
L CVE-2026-14257	<9.5.2-r0
M CVE-2026-16729	<9.5.2-r0
L GHSA-r7g4-qg5f-qqm2	<9.5.2-r0
L Exposure of Data Element to Wrong Session	<9.5.2-r0
L CVE-2026-18446	<9.5.2-r0
L Improper Input Validation	<9.5.2-r0
C CVE-2026-13697	<9.5.2-r0
L GHSA-268h-hp4c-crq3	<9.5.2-r0
L Improper Input Validation	<9.5.2-r0
M CVE-2026-16728	<9.5.2-r0
L CVE-2026-72630	<9.5.1-r0
L CVE-2026-72643	<9.5.1-r0
L CVE-2026-72632	<9.5.1-r0
L CVE-2026-72629	<9.5.1-r0
L CVE-2026-72631	<9.5.1-r0
L GHSA-f4gw-2p7v-4548	<9.5.1-r0
L GHSA-gcfj-64vw-6mp9	<9.5.1-r0
L GHSA-mmx7-hfxf-jppx	<9.5.1-r0
L GHSA-pmv8-rq9r-6j72	<9.5.1-r0
L GHSA-jqh4-m9w3-8hp9	<9.5.1-r0
L CVE-2026-39244	<9.5.1-r0
L GHSA-42h9-826w-cgv3	<9.5.1-r0
L GHSA-7q8q-rj6j-mhjq	<9.5.1-r0
L Improper Input Validation	<9.5.1-r0
L GHSA-hcpx-6fm6-wx23	<9.5.1-r0
M Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')	<9.5.1-r0
L GHSA-mwf2-3pr3-8698	<9.5.1-r0

Vulnerability

Vulnerable Version

CVE-2026-102406

<9.5.4-r0