org.elasticsearch.plugin:x-pack-core@8.7.1 vulnerabilities
-
latest version
8.15.0
-
latest non vulnerable version
-
first published
4 years ago
-
latest version published
a month ago
-
licenses detected
- [6.8.11,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.elasticsearch.plugin:x-pack-core package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
Affected versions of this package are vulnerable to Uncaught Exception when an encrypted PDF is passed to an attachment processor through the REST API. An attacker can trigger a crash by sending such an attachment. Unencrypted files and password-protected files are not vulnerable. How to fix Uncaught Exception? Upgrade |
[8.4.0,8.11.1)
|