io.zerows:zero-boot-actor (1.0.50), io.zerows:zero-boot-cloud-actor (1.0.50) +17 more potentially affected by CVE-2026-72679 via org.elasticsearch:elasticsearch (>=9.0.0, <=9.4.4)

org.elasticsearch:elasticsearch MAVEN version =9.0.0, =0.102.0, =9.4.0, =9.4.0, =9.0.0, =9.4.4 and more Source cves: CVE-2026-72679 Source advisory: MEND:CVE-2026-72679...

CVE-2026-72679 Uncontrolled Recursion in Elasticsearch Leading to Denial of Service

Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested pattern drives unbounded recursion that exhausts the thread stack and raises a fatal error, terminating the Elasticsearch node process and...

Elasticsearch 8.19.20, 9.4.5 Security Update (ESA-2026-81)

Uncontrolled Recursion in Elasticsearch Leading to Denial of Service Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested pattern drives unbounded recursion that exhausts the thread stack and...