PT-2025-44309

Name of the Vulnerable Software and Affected Versions Search Guard FLX versions 3.1.1 and earlier Description Field-Level Security FLS rules are not properly enforced on object-valued fields. When an FLS exclusion rule is applied to a field containing an object, the object is removed from search...

Floragunn Search Guard FLX 安全漏洞

Floragunn Search Guard FLX is a security component for protecting Elastic Search from Floragunn, Germany. A security vulnerability exists in Floragunn Search Guard FLX 3.1.1 and earlier versions, which stems from improper implementation of field-level security rules for object value fields, which...

PT-2025-44310

Name of the Vulnerable Software and Affected Versions Search Guard versions 3.1.1 and earlier Description Field Masking FM rules are not properly enforced on fields of type IP IP Address. While the content of these fields is redacted in search results, documents are still returned when searching...

EUVD-2021-1968

Malware in sbrugna...

EUVD-2007-3584

Malware in sbrugna...

EUVD-2021-0657

Malware in sbrugna...

EUVD-2017-17399

Malware in sbrugna...

EUVD-2019-4911

Malware in sbrugna...

EUVD-2023-1133

Malicious code in bioql PyPI...

EUVD-2025-29429

Malicious code in bioql PyPI...

EUVD-2022-3790

Malicious code in bioql PyPI...

EUVD-2023-0551

Malicious code in bioql PyPI...

EUVD-2022-3523

Malicious code in bioql PyPI...

EUVD-2023-2899

Malicious code in bioql PyPI...

EUVD-2024-20949

Malicious code in bioql PyPI...

EUVD-2025-17664

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-7019

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same...

Linux Distros Unpatched Vulnerability : CVE-2020-7020

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. Search queries do not properly...

Sensitive Information Disclosure

org.opensearch.plugin:opensearch-security is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper enforcement of Field Level Security FLS rules due to member attributes of excluded objects still being accessible through search queries, allowing reconstruction of...

GHSA-2RJV-CV85-XHGM OpenSearch unauthorized data access on fields protected by field level security if field is a member of an object

Impact OpenSearch versions 2.19.2 and earlier improperly apply Field Level Security FLS rules on fields which are not at the top level of the source document tree i.e., which are members of a JSON object. If an FLS exclusion rule like object is applied to an object valued attribute in a source...