974 matches found
CVE-2026-77620
A flaw was found in Vector's logstash source. An unauthenticated remote attacker can send specially crafted nested compressed frames. This can cause recursive decoding, leading to the exhaustion of the worker thread stack and amplification of decompressed input. Consequently, the process may...
dsiem
Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...
SweetSecurity
SweetSecurity Scripts to setup and install Bro IDS, Elasticsearch, Logstash, Kibana, and Critical Stack on any device. For more information on installation and how Sweet Security works, see the Wiki: https://github.com/TravisFSmith/SweetSecurity/wiki Installation: sudo python setup.py Follow...
CVE-2026-115714
Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...
CVE-2026-115714 Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections
Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...
EUVD-2026-116082
Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server; Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat; Elastic Agent, including Fleet Server and Cloudbeat; Logstash, for TLS connections that use the operating syste...
CVE-2026-115714
Several Elastic products shipped in Docker images are vulnerable to Improper Certificate Validation (CWE-295) due to a compromised third-party dependency. The operating system certificate bundle includes root CAs that signed eight eMudhra intermediate CAs with compromised private keys. This allow...
Multiple Elastic Docker images 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-237)
Improper Certificate Validation in Elastic Docker Images Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the operating system certificate bundle shipped in the Docker images of APM Server Auditbeat, Filebeat, Heartbeat, Metricbeat and Packetbeat Elastic Agent...
Logstash 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-228)
Improper Certificate Validation in Logstash Leading to Interception of TLS Connections Improper Certificate Validation CWE-295 in the Java runtime bundled with Logstash, a dependency of Logstash Dependency on Vulnerable Third-Party Component, CWE-1395, could allow an attacker to intercept or modi...
Logstash 8.12.1 < 8.19.24 / 9.0.x < 9.4.9 / 9.5.x < 9.5.6 Multiple Vulnerabilities (ESA-2026-228)
The version of Logstash installed on the remote host is 8.12.1 or later prior to 8.19.24, or 9.0.x prior to 9.4.9, or 9.5.x prior to 9.5.6. It is, therefore, affected by multiple vulnerabilities as referenced in the ESA-2026-228 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM for...
CLEANSTART-2026-MS85875 Security fix for GHSA-j288-q9x7-2f5v applied in: cassandra-reaper-fips 3.8.0-r3, logstash-fips 9.0.8-r2
GHSA-j288-q9x7-2f5v affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZX56372 go command may execute unexpected commands when operating in untrusted VCS repositories
Security vulnerability affects the logstash-exporter-fips package. The go command may execute unexpected commands when operating in untrusted VCS repositories...
CVE-2026-85396 vulnerabilities
Vulnerabilities for packages: cinc-auditor, logstash, logstash-fips...
GHSA-47M2-WP7J-P9VC vulnerabilities
Vulnerabilities for packages: cinc-auditor, logstash, logstash-fips...
CVE-2026-85396 vulnerabilities
Vulnerabilities for packages: logstash, cinc-auditor...
GHSA-47M2-WP7J-P9VC vulnerabilities
Vulnerabilities for packages: logstash, cinc-auditor...
ecs-mapping
Pipeline di Ingest ECS di Corelight Il repository è composto da file di Ingest Pipeline necessari per l'utilizzo con lo script di installazione presente nel repository https://github.com/corelight/ecs-templates L'installer in quel repository scaricherà i file da questo repository, pertanto...
ecs-logstash-mappings
Corelight ECS Logstash Pipeline Il repository contiene i file di pipeline Logstash necessari per essere utilizzati con lo script di installazione presente nel repository https://github.com/corelight/ecs-templates Lo script di installazione in quel repository scaricherà i file da questo repository...