logstash-9.3

Direct Vulnerabilities

Known vulnerabilities in the logstash-9.3 package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L GHSA-q4xh-88c3-wmh7	<9.3.8-r3
L GHSA-6cx8-rjf8-pr8g	<9.3.8-r3
L GHSA-wjgm-6hv5-3cvf	<9.3.8-r3
L CVE-2026-83557	<9.3.8-r3
L Uncontrolled Recursion	<9.3.8-r3
L CVE-2026-68497	<9.3.8-r3
L GHSA-gx83-3vf8-gh7j	<9.3.8-r3
L GHSA-xx22-p4ch-683r	<9.3.8-r3
L GHSA-gm45-99xc-r7wv	<9.3.8-r3
L GHSA-mcr4-qmvw-px4g	<9.3.8-r3
L GHSA-4v53-57pg-c464	<9.3.8-r3
L Uncontrolled Memory Allocation	<9.3.8-r3
L GHSA-343h-94h5-c4wr	<9.3.8-r3
L CVE-2026-19032	<9.3.8-r3
L NULL Pointer Dereference	<9.3.8-r3
L Time-of-check Time-of-use (TOCTOU)	<9.3.8-r3
L Allocation of Resources Without Limits or Throttling	<9.3.8-r3
L Uncontrolled Memory Allocation	<9.3.8-r3
L GHSA-hjcp-jmpx-g3qm	<9.3.8-r2
L CVE-2026-54399	<9.3.8-r2
L CVE-2026-54428	<9.3.8-r2
L Incorrect Authorization	<9.3.8-r2
L GHSA-5gvw-p9qm-jgwh	<9.3.8-r2
L Server-Side Request Forgery (SSRF)	<9.3.8-r2
L GHSA-mhm7-754m-9p8w	<9.3.8-r2
L GHSA-v3jc-474w-2wm6	<9.3.8-r2
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<9.3.8-r2
L GHSA-5jmj-h7xm-6q6v	<9.3.8-r2
L GHSA-hf6x-8p5f-cgmf	<9.3.8-r2
L Missing Release of Resource after Effective Lifetime	<9.3.8-r2
L GHSA-vvgp-rfg2-7rr6	<9.3.8-r2
L GHSA-6qm2-mcq7-53qp	<9.3.8-r0
L CVE-2026-18401	<9.3.8-r0
C HTTP Request Smuggling	<9.3.4-r4
H HTTP Request Smuggling	<9.3.4-r4
L GHSA-mj4r-2hfc-f8p6	<9.3.4-r4
L GHSA-9fxm-vc8v-hj55	<9.3.8-r0
L GHSA-xxqh-mfjm-7mv9	<9.3.4-r4
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<9.3.8-r0
L GHSA-5hh8-q8hv-fr38	<9.3.8-r0
L Incorrect Authorization	<9.3.8-r0
L GHSA-f6hv-jmp6-3vwv	<9.3.4-r4
L GHSA-c3fc-8qff-9hwx	<9.3.8-r0
L GHSA-j3rv-43j4-c7qm	<9.3.8-r0
L GHSA-72hv-8253-57qq	<9.3.8-r0
C HTTP Request Smuggling	<9.3.4-r4
L Incomplete Blacklist	<9.3.8-r0
L GHSA-h383-gmxw-35v2	<9.3.4-r4
L GHSA-2m67-wjpj-xhg9	<9.3.4-r2
L GHSA-v8h7-rr48-vmmv	<9.3.4-r4
H Improper Encoding or Escaping of Output	<9.3.4-r4
L GHSA-hgj6-7826-r7m5	<9.3.8-r0
L CVE-2026-0636	<9.3.8-r0
L Server-Side Request Forgery (SSRF)	<9.3.8-r0
L Resource Exhaustion	<9.3.4-r4
L GHSA-57rv-r2g8-2cj3	<9.3.4-r4
L GHSA-q339-8rmv-2mhv	<9.3.4-r2
L Resource Exhaustion	<9.3.4-r4
L GHSA-p93r-85wp-75v3	<9.3.5-r1
L Incorrect Authorization	<9.3.8-r0
L GHSA-38f8-5428-x5cv	<9.3.4-r4
L CRLF Injection	<9.3.4-r4
L CVE-2026-5598	<9.3.5-r1
L GHSA-rmj7-2vxq-3g9f	<9.3.8-r0
L Protection Mechanism Failure	<9.3.4-r2
L GHSA-rcqc-6cw3-h962	<9.3.8-r0
L Incomplete Blacklist	<9.3.8-r0
L CVE-2026-5588	<9.3.8-r0
L Integer Overflow or Wraparound	<9.3.4-r4
L GHSA-m4cv-j2px-7723	<9.3.4-r4
L GHSA-wg6q-6289-32hp	<9.3.8-r0
L GHSA-574f-3g2m-x479	<9.3.8-r0
L CVE-2025-14813	<9.3.8-r0
L Authentication Bypass	<9.3.7-r0
L Resource Exhaustion	<9.3.7-r0
L GHSA-2vqw-3mp8-cgmx	<9.3.7-r0
L GHSA-qpgp-93vx-g8v8	<9.3.7-r0
L GHSA-c4fp-cxrr-mj66	<9.3.6-r0
L GHSA-8p34-64r3-mwg8	<9.3.6-r0
L Arbitrary Command Injection	<9.3.6-r0
L Arbitrary Command Injection	<9.3.6-r0
L Improper Neutralization	<9.3.6-r0
L GHSA-46q3-7gv7-qmgg	<9.3.6-r0
L GHSA-5rv5-xj5j-3484	<9.3.4-r4
M Server-Side Request Forgery (SSRF)	<9.3.4-r4
L GHSA-87pf-fpwv-p7m7	<9.3.4-r1
L GHSA-hm49-wcqc-g2xg	<9.3.4-r1
H Algorithmic Complexity	<9.3.4-r1
L GHSA-75xq-5h9v-w6px	<9.3.4-r1
M Allocation of Resources Without Limits or Throttling	<9.3.4-r1
L GHSA-vcgp-9326-pqcp	<9.3.4-r1
L GHSA-q2mw-fvj9-vvcw	<9.3.4-r1
H Missing Report of Error Condition	<9.3.4-r1
C Arbitrary Command Injection	<9.3.4-r1
M Arbitrary Command Injection	<9.3.4-r1
L GHSA-8vqr-qjwx-82mw	<9.3.3-r2
L GHSA-qfgr-crr9-7r49	<9.3.3-r2
H Improper Encoding or Escaping of Output	<9.3.3-r2
M Interpretation Conflict	<9.3.3-r2
H Resource Exhaustion	<9.3.3-r2
L GHSA-33qg-7wpp-89cq	<9.3.3-r2
L GHSA-6hg6-v5c8-fphq	<9.3.3-r2
M Improper Handling of Length Parameter Inconsistency	<9.3.3-r2
M Interpretation Conflict	<9.3.3-r2
L Resource Exhaustion	<9.3.3-r2
L GHSA-vgpv-f759-9wx3	<9.3.3-r2
L Incorrect Behavior Order: Validate Before Canonicalize	<9.3.3-r2
L Partial Comparison	<9.3.3-r2
L GHSA-g2pf-xv49-m2h5	<9.3.3-r2
L GHSA-q4qf-9j86-f5mh	<9.3.3-r2
C Improper Authentication	<9.3.3-r2
L GHSA-qv7j-4883-hwh7	<9.3.3-r2
L GHSA-v6x5-cg8r-vv6x	<9.3.3-r2
M Improper Validation of Certificate with Host Mismatch	<9.3.3-r2
L Inefficient Regular Expression Complexity	<9.3.3-r2
L Race Condition	<9.3.3-r2
L Resource Exhaustion	<9.3.3-r2
L GHSA-h2jq-g4cq-5ppq	<9.3.3-r2
L Permissive Regular Expression	<9.3.3-r2
L GHSA-q2ww-5357-x388	<9.3.3-r2
L GHSA-445c-vh5m-36rj	<9.3.3-r2
L GHSA-5qcv-4rpc-jp93	<9.3.3-r2
L GHSA-v569-hp3g-36wr	<9.3.3-r2
L GHSA-h27x-rffw-24p4	<9.3.3-r2
L GHSA-x8cg-fq8g-mxfx	<9.3.3-r2
H Permissive Regular Expression	<9.3.3-r2
H Resource Exhaustion	<9.3.3-r2
L GHSA-3pxv-7cmr-fjr4	<9.3.3-r2
L GHSA-7mqq-6cf9-v2qp	<9.3.3-r2
M Improper Validation of Syntactic Correctness of Input	<9.3.3-r2
H Improper Output Neutralization for Logs	<9.3.3-r2
L GHSA-pwqr-wmgm-9rr8	<9.3.3-r0
L HTTP Request Smuggling	<9.3.3-r0
L GHSA-3m6g-2423-7cp3	<9.3.2-r1
C Use of Externally-Controlled Format String	<9.3.2-r1
L Uncontrolled Recursion	<9.3.1-r4
L GHSA-j288-q9x7-2f5v	<9.3.1-r4
L Directory Traversal	<9.3.1-r1
L Server-Side Request Forgery (SSRF)	<9.3.1-r0
L GHSA-mxw3-3hh2-x2mh	<9.3.1-r1
L GHSA-33mh-2634-fwr2	<9.3.1-r0
L GHSA-rp46-r563-jrc7	<9.3.0-r0
L GHSA-whrj-4476-wvmp	<9.3.1-r1
L Cross-site Scripting (XSS)	<9.3.1-r1
L Arbitrary Code Injection	<9.3.0-r0

Vulnerability

Vulnerable Version

GHSA-q4xh-88c3-wmh7

<9.3.8-r3