io.zerows:zero-boot-actor (1.0.50), io.zerows:zero-boot-cloud-actor (1.0.50) +17 more potentially affected by CVE-2026-72636 via org.elasticsearch:elasticsearch (>=9.0.0-beta1, <=9.4.4)

org.elasticsearch:elasticsearch MAVEN version =9.0.0-beta1, =0.102.0, =9.4.0, =9.4.0, =9.0.0-beta1, =9.4.4 and more Source cves: CVE-2026-72636 Source advisory: MEND:CVE-2026-72636...

CVE-2026-72636 Uncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of Service

Uncontrolled Recursion CWE-674 in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation CAPEC-130. The matcher used to resolve wildcard patterns against names is implemented recursively and had no bound on recursion depth or on the total number of mat...

cn.vertxup:zero-ifx-es (0.9.0), cn.vertxup:zero-vie (0.9.0) +22 more potentially affected by CVE-2026-72636 via org.elasticsearch:elasticsearch (>=8.0.0-alpha1, <=8.19.19)

org.elasticsearch:elasticsearch MAVEN version =8.0.0-alpha1, =0.4.0, =3.0.4, =1.2.0, =2.6.7, =8.9.0-alpha5-rc1, =8.9.0-alpha5-rc1, =main-318, =main-272, =main-272, =0.80.0, =6.12, =8.0.0-rc1, =8.0.0-rc1, =8.14.1.0 and more Source cves: CVE-2026-72636 Source advisory: MEND:CVE-2026-72636...

Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-133)

Uncontrolled Recursion in Elasticsearch Wildcard Matching Leading to Denial of Service Description: Uncontrolled Recursion CWE-674 in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation CAPEC-130. The matcher used to resolve wildcard patterns agains...