Homepage

org.elasticsearch:elasticsearch@8.13.2 vulnerabilities

  • latest version

    9.1.2

  • latest non vulnerable version

    9.1.2

  • first published

    15 years ago

  • latest version published

    22 days ago

  • licenses detected

  • package registry

    View on Maven Central Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the org.elasticsearch:elasticsearch package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Denial of Service (DoS)

    org.elasticsearch:elasticsearch is a Distributed, RESTful Search Engine.

    Affected versions of this package are vulnerable to Denial of Service (DoS) via specifically crafted search templates with Mustache functions. An attacker can cause the Elasticsearch node to crash by sending malicious search templates.

    How to fix Denial of Service (DoS)?

    Upgrade org.elasticsearch:elasticsearch to version 7.17.25, 8.16.0 or higher.

    [,7.17.25)[8.0.0-alpha1,8.16.0)
    • M
    Stack-based Buffer Overflow

    org.elasticsearch:elasticsearch is a Distributed, RESTful Search Engine.

    Affected versions of this package are vulnerable to Stack-based Buffer Overflow through the ingestion of documents when an index template contains a dynamic field mapping of “passthrough” type. An attacker can cause a system to crash ingesting documents in this index.

    Note:

    Passthrough fields is an experimental feature.

    How to fix Stack-based Buffer Overflow?

    Upgrade org.elasticsearch:elasticsearch to version 8.14.0 or higher.

    [8.13.1,8.14.0)
    Go back to all versions of this package