opensearch-2 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the opensearch-2 package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
L CVE-2024-34447	<2.16.0-r0
L GHSA-v435-xc8x-wvr9	<2.16.0-r0
L CVE-2024-30172	<2.16.0-r0
L CVE-2024-30171	<2.16.0-r0
L GHSA-4h8f-2wvx-gg5w	<2.16.0-r0
L CVE-2024-29857	<2.16.0-r0
L GHSA-8xfc-gm6g-vgpv	<2.16.0-r0
L GHSA-m44j-cfrm-g8qc	<2.16.0-r0
L GHSA-w877-jfw7-46rj	<2.15.0-r0
L CVE-2024-37902	<2.15.0-r0
L Improper Input Validation	<2.14.0-r0
L GHSA-jw7r-rxff-gv24	<2.14.0-r0
L Server-Side Request Forgery (SSRF)	<2.13.0-r0
L GHSA-qmgx-j96g-4428	<2.13.0-r0
L CVE-2024-29025	<2.13.0-r0
L GHSA-5jpm-x58v-624v	<2.13.0-r0
M Allocation of Resources Without Limits or Throttling	<2.12.0-r1
M Loop with Unreachable Exit Condition ('Infinite Loop')	<2.12.0-r1
L GHSA-4g9r-vxhx-9pgx	<2.12.0-r1
L GHSA-4265-ccf5-phj5	<2.12.0-r1
L GHSA-68m8-v89j-7j2p	<2.11.1-r1
L GHSA-cgwf-w82q-5jrr	<2.10.0-r1
M Use After Free	<2.11.1-r1
M CVE-2023-42503	<2.10.0-r1