cn.vertxup:zero-ifx-es (0.9.0), cn.vertxup:zero-vie (0.9.0) +20 more potentially affected by CVE-2026-72647 via org.elasticsearch:elasticsearch (>=8.0.0, <=8.19.19)

org.elasticsearch:elasticsearch MAVEN version =8.0.0, =0.4.0, =1.2.0, =2.6.7, =8.9.0-alpha5-rc1, =8.9.0-alpha5-rc1, =main-272, =main-272, =main-272, =0.80.0, =6.12, =8.0.0, =8.0.0, =8.0.0, =8.14.1.0 and more Source cves: CVE-2026-72647 Source advisory: MEND:CVE-2026-72647...

CVE-2026-72647 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads CAPEC-230. An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without...

Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-118)

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads CAPEC-230. An authenticated user holding only read privileges on a single index can submit one specially...