com.github.tlrx:elasticsearch-test (>=0.0.5, <=0.0.6), org.tynamo:tapestry-model-jpa (>=0.5.0, <=0.6.0) potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.20.0.rc1)

org.elasticsearch:elasticsearch MAVEN version 0.20.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.tlrx:elasticsearch-test =0.0.5, =0.5.0, =0.6.0 Source cves: CVE-2020-7020 Source...

fr.pilato.elasticsearch.river:fsriver (0.0.2), io.searchbox:jest (0.0.1) potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.19.8)

org.elasticsearch:elasticsearch MAVEN version 0.19.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - fr.pilato.elasticsearch.river:fsriver 0.0.2 - io.searchbox:jest 0.0.1 Source cves: CVE-2020-7020...

com.github.dapicard.elasticsearch.curator:elasticsearch-curator (1.6.0.1), com.github.lbroudoux.elasticsearch:amazon-s3-river (1.6.0) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (1.6.2)

org.elasticsearch:elasticsearch MAVEN version 1.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.dapicard.elasticsearch.curator:elasticsearch-curator 1.6.0.1 -...

GHSA-G9FW-9X87-RMRJ Privilege Context Switching Error in Elasticsearch

Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain complex queries. This could result in the search disclosing the existence of documen...

org.elasticsearch.client:transport (5.0.0-alpha5), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha5) +31 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.0.0-alpha5)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.client:transport 5.0.0-alpha5 - org.elasticsearch.plugin:analysis-icu...

org.elasticsearch:elasticsearch-analysis-icu (0.17.5), org.elasticsearch:elasticsearch-cloud-aws (0.17.5) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.17.5)

org.elasticsearch:elasticsearch MAVEN version 0.17.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.5 - org.elasticsearch:elasticsearch-cloud-aws...

com.kwince.contribs:osemmanager (0.0.1), org.elasticsearch:elasticsearch-analysis-icu (>=0.18.5, <=1.1.0) +16 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.18.5)

org.elasticsearch:elasticsearch MAVEN version 0.18.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.kwince.contribs:osemmanager 0.0.1 - org.elasticsearch:elasticsearch-analysis-icu =0.18.5,...

org.elasticsearch:elasticsearch-analysis-icu (0.17.3), org.elasticsearch:elasticsearch-cloud-aws (0.17.3) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.17.3)

org.elasticsearch:elasticsearch MAVEN version 0.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.3 - org.elasticsearch:elasticsearch-cloud-aws...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.1.0, <=5.2.1), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.1.0, <=5.2.1) +657 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (>=6.0.0-alpha1, <=6.8.12)

org.elasticsearch:elasticsearch MAVEN version =6.0.0-alpha1, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =5.1.0, =0.1.0, =4.0.0-beta-1, =1.2.0.release, =1.1.1.release, =1.4.2.release and more Source cves: CVE-2020-7020 Source advisory: OSV:GHSA-G9FW-9X87-RMRJ...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (2.0.1), com.sindicetech.siren:siren-elasticsearch (1.3) +6 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (1.2.2)

org.elasticsearch:elasticsearch MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 2.0.1 -...

org.elasticsearch:elasticsearch-analysis-icu (0.17.10), org.elasticsearch:elasticsearch-cloud-aws (0.17.10) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.17.10)

org.elasticsearch:elasticsearch MAVEN version 0.17.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.10 - org.elasticsearch:elasticsearch-cloud-aw...

com.aconex.scrutineer:scrutineer (1.0.5), org.graylog2:graylog2-plugin (>=0.10.1, <=0.10.14) potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.19.10)

org.elasticsearch:elasticsearch MAVEN version 0.19.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.aconex.scrutineer:scrutineer 1.0.5 - org.graylog2:graylog2-plugin =0.10.1, =0.10.14 Source...

com.yakaz.elasticsearch.plugins:elasticsearch-action-updatebyquery (1.0.0) potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.20.0)

org.elasticsearch:elasticsearch MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.yakaz.elasticsearch.plugins:elasticsearch-action-updatebyquery 1.0.0 Source cves:...

com.github.richardwill98.elasticsearch:elasticsearch-river-mongodb (1.6.2), com.github.tlrx:elasticsearch-test (0.0.7) +1 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.20.1)

org.elasticsearch:elasticsearch MAVEN version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwill98.elasticsearch:elasticsearch-river-mongodb 1.6.2 -...

com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings (>=1.0.0, <=1.0.1) potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.90.0.rc1)

org.elasticsearch:elasticsearch MAVEN version 0.90.0.rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.yakaz.elasticsearch.plugins:elasticsearch-action-reloadsettings =1.0.0, =1.0.1 Source...

com.bazoud.elasticsearch:elasticsearch-river-git (>=0.0.1, <=0.1.0), com.github.joschi:dropwizard-elasticsearch (0.1.0) +45 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.90.3)

org.elasticsearch:elasticsearch MAVEN version 0.90.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.bazoud.elasticsearch:elasticsearch-river-git =0.0.1, =2.7, =2.9.1, =0.90.3.0, =0.1.0, =0.1.3...

at.molindo:esi4j (>=0.3.0, <=0.3.2), com.code972:elasticsearch-analysis-hebrew (1.0) +13 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.90.11)

org.elasticsearch:elasticsearch MAVEN version 0.90.11 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j =0.3.0, =0.3.2 - com.code972:elasticsearch-analysis-hebrew 1.0 -...

com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb (2.0.2), org.elasticsearch:elasticsearch-lang-javascript (2.3.1) +1 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (1.3.5)

org.elasticsearch:elasticsearch MAVEN version 1.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.github.richardwilly98.elasticsearch:elasticsearch-river-mongodb 2.0.2 -...

at.molindo:esi4j (>=3.0.0, <=3.0.2), com.github.dapicard.elasticsearch.curator:elasticsearch-curator (1.7.0.1) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (1.7.4)

org.elasticsearch:elasticsearch MAVEN version 1.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - at.molindo:esi4j =3.0.0, =2.4.1, =1.2.0, =1.2.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0, =0.11.0,...

com.floragunn:search-guard-2 (>=5.0.0-rc1-6a, <=5.0.0-rc1-6d), com.floragunn:search-guard-ssl (>=5.0.0-rc1-16c, <=5.0.0-rc1-16d) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (5.0.0-rc1)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-2 =5.0.0-rc1-6a, =5.0.0-rc1-16c, =5.0.0-rc1-16d -...