1332 matches found
CVE-2026-43826 Apache Airflow Providers OpenSearch: OpenSearch task-log handler leaks credentials embedded in the host URL
The OpenSearch logging provider, when configured with a host URL that embeds credentials for example https://user:[email protected]:9200, wrote the full host URL — including the embedded credentials — into task logs. Any user with task-log read permission could harvest the backend...
CVE-2026-43826
The OpenSearch logging provider, when configured with a host URL that embeds credentials for example https://user:[email protected]:9200, wrote the full host URL — including the embedded credentials — into task logs. Any user with task-log read permission could harvest the backend...
CVE-2026-43826: Insertion of Sensitive Information into Log File
The OpenSearch logging provider, when configured with a host URL that embeds credentials for example https://user:[email protected]:9200, wrote the full host URL — including the embedded credentials — into task logs. Any user with task-log read permission could harvest the backend...
PT-2026-39579
The OpenSearch logging provider, when configured with a host URL that embeds credentials for example https://user:[email protected]:9200, wrote the full host URL — including the embedded credentials — into task logs. Any user with task-log read permission could harvest the backend...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to ineffective hostname verification in the TLS certificate validation. An attacker can bypass expected hostname checks by presenting a certificate signed by the trusted certificate authority but with...
GHSA-X5HG-X4GV-J98M OpenSearch has ineffective TLS certificate hostname verification
Description A regression was introduced in OpenSearch 2.18.0 that caused the plugins.security.ssl.transport.enforcehostnameverification setting to be ineffective. When this setting was enabled, OpenSearch did not verify that the hostname in a connecting node's TLS certificate matched the hostname...
org.opensearch.migrations.trafficcapture:trafficcaptureproxyserver (>=0.2.5.3, <=0.2.5.17) potentially affected by unknown CVE via org.opensearch.plugin:opensearch-security (2.19.3.0)
org.opensearch.plugin:opensearch-security MAVEN version 2.19.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opensearch.plugin:opensearch-security and may be impacted: - org.opensearch.migrations.trafficcapture:trafficcaptureproxyserver =0.2.5....
org.opensearch.migrations.trafficcapture:trafficcaptureproxyserver (>=0.2.5.3, <=0.2.5.17) potentially affected by unknown CVE via org.opensearch.plugin:opensearch-security (2.19.3.0)
org.opensearch.plugin:opensearch-security MAVEN version 2.19.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opensearch.plugin:opensearch-security and may be impacted: - org.opensearch.migrations.trafficcapture:trafficcaptureproxyserver =0.2.5....
org.opensearch.migrations.trafficcapture:trafficcaptureproxyserver (>=0.2.5.3, <=0.2.5.17) potentially affected by unknown CVE via org.opensearch.plugin:opensearch-security (2.19.3.0)
org.opensearch.plugin:opensearch-security MAVEN version 2.19.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opensearch.plugin:opensearch-security and may be impacted: - org.opensearch.migrations.trafficcapture:trafficcaptureproxyserver =0.2.5....
io.github.andrekurait.trafficcapture:dockersolution (>=0.1.3, <=0.1.5), io.github.andrekurait.trafficcapture:trafficcaptureproxyserver (>=0.1.3, <=0.1.5) +6 more potentially affected by unknown CVE via org.opensearch.plugin:opensearch-security (>=2.11.1.0, <=2.19.3.0)
org.opensearch.plugin:opensearch-security MAVEN version =2.11.1.0, =0.1.3, =0.1.3, =0.1.3, =0.1.2, =0.1.2, =0.1.2, =0.1.0, =0.1.0, =0.2.3.10 Source cves: unknown CVE Source advisory: OSV:GHSA-X83W-23JP-G6PW...
OpenSearch Security plugin: DLS not applied on documents linked by has_child or has_parent relation
Description A flaw was identified in the OpenSearch Security plugin's document-level security DLS implementation. DLS restrictions were not correctly applied to search queries that use hasparent or haschild join relations. This could allow an authenticated user to access document contents that...
OpenSearch vulnerable to improper authorization for Rollover Requests
Description A flaw was identified in the OpenSearch Security plugin's handling of index rollover requests. When a rollover request included an explicit target index name, the security plugin did not properly evaluate access control permissions against the target index. This could allow a user wit...
io.github.andrekurait.trafficcapture:dockersolution (>=0.1.3, <=0.1.5), io.github.andrekurait.trafficcapture:trafficcaptureproxyserver (>=0.1.3, <=0.1.5) +6 more potentially affected by unknown CVE via org.opensearch.plugin:opensearch-security (>=2.11.1.0, <=2.19.3.0)
org.opensearch.plugin:opensearch-security MAVEN version =2.11.1.0, =0.1.3, =0.1.3, =0.1.3, =0.1.2, =0.1.2, =0.1.2, =0.1.0, =0.1.0, =0.2.3.10 Source cves: unknown CVE Source advisory: GHSA-22VX-2X23-98W6...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the handling of index rollover requests when an explicit target index name is provided. An attacker can create a new index with an unauthorized name by exploiting insufficient access control checks on the targ...
GHSA-22VX-2X23-98W6 OpenSearch vulnerable to improper authorization for Rollover Requests
Description A flaw was identified in the OpenSearch Security plugin's handling of index rollover requests. When a rollover request included an explicit target index name, the security plugin did not properly evaluate access control permissions against the target index. This could allow a user wit...
io.github.andrekurait.trafficcapture:dockersolution (>=0.1.3, <=0.1.5), io.github.andrekurait.trafficcapture:trafficcaptureproxyserver (>=0.1.3, <=0.1.5) +6 more potentially affected by unknown CVE via org.opensearch.plugin:opensearch-security (>=2.11.1.0, <=2.19.3.0)
org.opensearch.plugin:opensearch-security MAVEN version =2.11.1.0, =0.1.3, =0.1.3, =0.1.3, =0.1.2, =0.1.2, =0.1.2, =0.1.0, =0.1.0, =0.2.3.10 Source cves: unknown CVE Source advisory: SNYK:JAVA-ORGOPENSEARCHPLUGIN-16796362...
io.github.andrekurait.trafficcapture:dockersolution (>=0.1.3, <=0.1.5), io.github.andrekurait.trafficcapture:trafficcaptureproxyserver (>=0.1.3, <=0.1.5) +6 more potentially affected by unknown CVE via org.opensearch.plugin:opensearch-security (2.11.1.0)
org.opensearch.plugin:opensearch-security MAVEN version 2.11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opensearch.plugin:opensearch-security and may be impacted: - io.github.andrekurait.trafficcapture:dockersolution =0.1.3, =0.1.3, =0.1.3...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization in the REST layer when processing malformed HTTP requests. An attacker can gain unauthorized access to restricted API endpoints by crafting specially formed HTTP requests. This is only exploitable if custom plugi...
GHSA-83X9-VC3C-HGHC OpenSearch has a bypass of REST Layer Authorization Using Malformed Paths
Description A flaw was identified in the OpenSearch REST layer that could allow authorization checks to be bypassed when processing certain malformed HTTP requests. This could permit unauthorized access to restricted API endpoints in environments that rely on REST-layer authorization...
io.github.andrekurait.trafficcapture:dockersolution (>=0.1.3, <=0.1.5), io.github.andrekurait.trafficcapture:trafficcaptureproxyserver (>=0.1.3, <=0.1.5) +6 more potentially affected by unknown CVE via org.opensearch.plugin:opensearch-security (2.11.1.0)
org.opensearch.plugin:opensearch-security MAVEN version 2.11.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.opensearch.plugin:opensearch-security and may be impacted: - io.github.andrekurait.trafficcapture:dockersolution =0.1.3, =0.1.3, =0.1.3...