logstash-9-with-output-opensearch

Direct Vulnerabilities

Known vulnerabilities in the logstash-9-with-output-opensearch package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
H CVE-2026-13506	*
C CVE-2026-8763	*
L Allocation of Resources Without Limits or Throttling	*
C Improper Check for Unusual or Exceptional Conditions	*
H Algorithmic Complexity	*
L Interpretation Conflict	*
L Improper Certificate Validation	*
L Improper Input Validation	*
L Uncontrolled Recursion	*
L Uncontrolled Memory Allocation	*
L Improper Input Validation	*
L Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	*
L Information Exposure Through Caching	*
L Improper Encoding or Escaping of Output	*
M Use After Free	*
L NULL Pointer Dereference	*
L Heap-based Buffer Overflow	*
H Allocation of Resources Without Limits or Throttling	*
L Improper Access Control	*
M CRLF Injection	*
L Resource Exhaustion	*
L Resource Exhaustion	*
H Resource Exhaustion	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H HTTP Request Smuggling	*
L GHSA-r7wm-3cxj-wff9	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
L CVE-2025-14813	*
L Server-Side Request Forgery (SSRF)	*
L Incomplete Blacklist	*
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
L Incomplete Blacklist	*
L GHSA-5prr-v3j2-97mh	*
L Missing Lock Check	*
L GHSA-wjv4-x9w8-wm3h	*
L Uncontrolled Recursion	*
L GHSA-9cv2-cfxc-v4v2	*
L GHSA-5v8h-3h3q-446p	*
L CVE-2026-54905	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
L GHSA-p67v-3w7g-wjg7	*
L GHSA-phwj-rprq-35pp	*
L GHSA-8678-w3jw-xfc2	*
L GHSA-wfpw-mmfh-qq69	*
L HTTP Request Smuggling	*
L Improper Verification of Cryptographic Signature	*
L Improper Neutralization	*
L Arbitrary Command Injection	*
L Arbitrary Command Injection	*
L Authentication Bypass	*
L Allocation of Resources Without Limits or Throttling	*
L Resource Exhaustion	*
L Improper Access Control	*
L Information Exposure	*
L CVE-2025-12183	*
M Server-Side Request Forgery (SSRF)	*

logstash-9-with-output-opensearch

Direct Vulnerabilities

Fix vulnerabilities automatically