SecurityClaw

SecurityClaw — Autonomous SOC Agentic Framework A modular, skill-based autonomous Security Operations Center SOC agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs. Features Skill Modularity — Capabilities as isolate...

CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It was found that the Opensearch plugin called "reports" was vulnerable to HTML-injection in version 2.18.0. The report functionality allowed users to store HTML in the header and footer while creating a new report definition. Below is a quick...

CVE-Wazuh

Wazuh Manager — NDJSON Injection in inventorysync via Agent-Controlled DataValue.index - Draft Enrolled agent can smuggle arbitrary OpenSearch bulk operations via DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual...

pySigma-backend-opensearch

pySigma OpenSearch Backend This is the OpenSearch backend for pySigma. It provides the package sigma.backends.opensearch with two backend classes: OpensearchLuceneBackend - Converts Sigma rules to Lucene query syntax OpenSearchPPLBackend - Converts Sigma rules to PPL Piped Processing Language...

Sentora

Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...

GHSA-J8RW-JP99-435V vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, jitsucom-jitsu, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, kibana, ory-polis, kubeflow-centraldashboard, arangodb, ory-polis-fips, opensearch-dashboards-fips, dotstatsuite-supercore...

GHSA-W4XR-HQV8-CH44 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, jitsucom-jitsu, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, kibana, ory-polis, kubeflow-centraldashboard, arangodb, ory-polis-fips, opensearch-dashboards-fips, dotstatsuite-supercore...

CVE-2026-125332 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, jitsucom-jitsu, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, kibana, ory-polis, kubeflow-centraldashboard, arangodb, ory-polis-fips, opensearch-dashboards-fips, dotstatsuite-supercore...

CVE-2026-125333 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, jitsucom-jitsu, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, kibana, ory-polis, kubeflow-centraldashboard, arangodb, ory-polis-fips, opensearch-dashboards-fips, dotstatsuite-supercore...

CVE-2026-125334 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, jitsucom-jitsu, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, kibana, ory-polis, kubeflow-centraldashboard, arangodb, ory-polis-fips, opensearch-dashboards-fips, dotstatsuite-supercore...

CVE-2026-125335 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, jitsucom-jitsu, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, kibana, ory-polis, kubeflow-centraldashboard, arangodb, ory-polis-fips, opensearch-dashboards-fips, dotstatsuite-supercore...

GHSA-6889-VF6X-F3G5 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, jitsucom-jitsu, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, kibana, ory-polis, kubeflow-centraldashboard, arangodb, ory-polis-fips, opensearch-dashboards-fips, dotstatsuite-supercore...

GHSA-6CV4-P8M7-4R25 vulnerabilities

Vulnerabilities for packages: dotstatsuite-url-shortener, jitsucom-jitsu, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, kibana, ory-polis, kubeflow-centraldashboard, arangodb, ory-polis-fips, opensearch-dashboards-fips, dotstatsuite-supercore...

CVE-2026-64686

OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery SSRF vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling...

CVE-2026-64686

OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery SSRF vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling...

CVE-2026-64686 OpenSearch Dashboards: SSRF in fetchDataSourceMetaData — missing endpoint validation

OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery SSRF vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling...

CVE-2026-64686 OpenSearch Dashboards: SSRF in fetchDataSourceMetaData — missing endpoint validation

OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery SSRF vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling...

CVE-2026-64686

OpenSearch Dashboards versions 2.14.0 to before 2.19.6 and 3.0.0 to before 3.7.0 are vulnerable to a Server-Side Request Forgery (SSRF) in the fetchDataSourceMetaData route. The root cause is a missing endpoint validation ; while the test_connection route validates URLs against endpointDeniedIPs ...

CVE-2026-64686: opensearch-project OpenSearch-Dashboards: OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch

OpenSearch Dashboards is an open-source data visualization tool designed to work with OpenSearch. From versions 2.14.0 to before 2.19.6, and 3.0.0 to before 3.7.0, a Server-Side Request Forgery SSRF vulnerability in OpenSearch Dashboards exists in the fetchDataSourceMetaData route. The sibling...

GHSA-GHC9-756G-VRCV vulnerabilities

Vulnerabilities for packages: debezium-server, debezium-server-fips, kafbat-ui-fips, cruise-control-fips, opensearch, conductor, dependency-track, apicurio-registry, geoserver, pinot-fips, datahub-gms-fips, kayenta-fips, akhq, strimzi-kafka-operator, kayenta, conductor-fips, opensearch-fips,...