cn.vertxup:zero-ifx-es (0.9.0), cn.vertxup:zero-vie (0.9.0) +20 more potentially affected by CVE-2026-72687 via org.elasticsearch:elasticsearch (>=8.0.0, <=8.19.19)

org.elasticsearch:elasticsearch MAVEN version =8.0.0, =0.4.0, =1.2.0, =2.6.7, =8.9.0-alpha5-rc1, =8.9.0-alpha5-rc1, =main-272, =main-272, =main-272, =0.80.0, =6.12, =8.0.0, =8.0.0, =8.0.0, =8.14.1.0 and more Source cves: CVE-2026-72687 Source advisory: MEND:CVE-2026-72687...

Elasticsearch 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-79)

Memory Allocation with Excessive Size Value in Elasticsearch Leading to Denial of Service A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before...