kibana | Snyk

Direct Vulnerabilities

Known vulnerabilities in the kibana package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Open Redirect	*
M Improper Input Validation	*
L Resource Exhaustion	*
M Improper Input Validation	*
L Inefficient Regular Expression Complexity	*
L Inefficient Regular Expression Complexity	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
M Access of Resource Using Incompatible Type ('Type Confusion')	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
L Cross-site Request Forgery (CSRF)	*
M Resource Exhaustion	*
L Resource Exhaustion	*
L Open Redirect	*
L Open Redirect	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Cross-site Scripting (XSS)	*
L Cross-site Scripting (XSS)	*
M Modification of Assumed-Immutable Data (MAID)	*
M Modification of Assumed-Immutable Data (MAID)	*
L Modification of Assumed-Immutable Data (MAID)	*
L Modification of Assumed-Immutable Data (MAID)	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M OS Command Injection	*
M OS Command Injection	*
L Arbitrary Code Injection	*
L Arbitrary Code Injection	*
L Arbitrary Code Injection	*
L Arbitrary Code Injection	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
M Improper Input Validation	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Information Exposure	*
M CVE-2024-37279	*
M Missing Authorization	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Out-of-bounds Read	*
M Out-of-bounds Read	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Files or Directories Accessible to External Parties	*
M Files or Directories Accessible to External Parties	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Open Redirect	*
M Open Redirect	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Open Redirect	*
M Open Redirect	*
M Open Redirect	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Request Forgery (CSRF)	*
M Arbitrary Code Injection	*
M Arbitrary Code Injection	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
L Improperly Implemented Security Check for Standard	*
M Information Exposure Through Log Files	*
M Information Exposure Through Log Files	*
M Information Exposure Through Log Files	*
M Improper Input Validation	*
M Improper Input Validation	*
L Resource Exhaustion	*
L Resource Exhaustion	*
M Resource Exhaustion	*
M Resource Exhaustion	*
L Modification of Assumed-Immutable Data (MAID)	*
L Modification of Assumed-Immutable Data (MAID)	*
M Improper Input Validation	*
M Improper Input Validation	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*

Vulnerability

Vulnerable Version

Cross-site Scripting (XSS)