GHSA-MW3V-MMFW-3X2G vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-9624 vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-67MF-3CR5-8W23 vulnerabilities

Vulnerabilities for packages: sonarqube, cassandra, opensearch...

CVE-2025-8885 vulnerabilities

Vulnerabilities for packages: sonarqube, cassandra, opensearch...

Airflow externalLogUrl Permission Bypass

1. Summary The externalLogUrl endpoint in Airflow’s FastAPI enforces only the weaker Task Instance access permission TASKINSTANCE instead of the intended Task Logs permission TASKLOGS. As a result, low-privileged users who are not authorized to view task logs can still obtain external log access...

fastapi-users-db-opensearch (>=0.0.0, <=0.0.4), fastapi-users-db-sqlalchemy (3.0.2) potentially affected by CVE-2025-68481 via fastapi-users (9.3.2)

fastapi-users PYPI version 9.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastapi-users and may be impacted: - fastapi-users-db-opensearch =0.0.0, =0.0.4 - fastapi-users-db-sqlalchemy 3.0.2 Source cves: CVE-2025-68481 Source advisory:...

Denial Of Service (DoS)

OpenSearch is vulnerable to Denial Of Service DoS. The vulnerability is due to the handling of overly complex querystring inputs, which allows an attacker to submit specially crafted queries that exhaust system resources and trigger a DoS condition...

CVE-2025-9624

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions between 3.0.0 and 3.3.0 and OpenSearch 2.19.4...

GHSA-MW3V-MMFW-3X2G vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-9624 vulnerabilities

Vulnerabilities for packages: opensearch...

Linux Distros Unpatched Vulnerability : CVE-2025-9624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versio...

GHSA-5GFM-WPXJ-WJGQ vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-katib, arangodb, kubeflow-centraldashboard, opensearch-dashboards-fips, jitsucom-jitsu, gitlab-rails-ce, kibana, gitlab-rails-ce-fips, opensearch-dashboards...

CVE-2025-12816 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-katib, arangodb, kubeflow-centraldashboard, opensearch-dashboards-fips, jitsucom-jitsu, gitlab-rails-ce, kibana, gitlab-rails-ce-fips, opensearch-dashboards...

CVE-2025-66030 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-katib, arangodb, kubeflow-centraldashboard, opensearch-dashboards-fips, jitsucom-jitsu, gitlab-rails-ce, kibana, gitlab-rails-ce-fips, opensearch-dashboards...

GHSA-554W-WPV2-VW27 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-katib, arangodb, kubeflow-centraldashboard, opensearch-dashboards-fips, jitsucom-jitsu, gitlab-rails-ce, kibana, gitlab-rails-ce-fips, opensearch-dashboards...

CVE-2025-66031 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-katib, arangodb, kubeflow-centraldashboard, opensearch-dashboards-fips, jitsucom-jitsu, gitlab-rails-ce, kibana, gitlab-rails-ce-fips, opensearch-dashboards...

GHSA-65CH-62R8-G69G vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-katib, arangodb, kubeflow-centraldashboard, opensearch-dashboards-fips, jitsucom-jitsu, gitlab-rails-ce, kibana, gitlab-rails-ce-fips, opensearch-dashboards...

GHSA-MW3V-MMFW-3X2G OpenSearch is vulnerable to DoS via complex query_string inputs

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions below 2.19.4 and versions 3.0.0 through 3.2.0...

com.erudika:para-search-elasticsearch (1.42.0), org.codelibs.fesen.client:fesen-httpclient (>=3.0.0, <=3.2.0) +43 more potentially affected by CVE-2025-9624 via org.opensearch:opensearch-common (>=3.0.0, <=3.2.0)

org.opensearch:opensearch-common MAVEN version =3.0.0, =3.0.0, =15.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0, =3.0.0.0, =3.22.0, =3.0.0, =3.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.2 and more Source cves: CVE-2025-9624 Source advisory: GHSA-MW3V-MMFW-3X2G...

com.digitalpebble.stormcrawler:storm-crawler-opensearch (>=2.9, <=2.11), com.erudika:para-search-elasticsearch (>=1.41.1, <=1.41.3) +109 more potentially affected by CVE-2025-9624 via org.opensearch:opensearch-common (>=2.6.0, <=2.19.3)

org.opensearch:opensearch-common MAVEN version =2.6.0, =2.9, =1.41.1, =1.0.0-test, =3.0.3, =13.38.0.release, =13.38.0.release, =13.38.0.release, =0.1.3, =0.1.3, =0.1.3, =0.1.2, =0.1.2, =0.1.2, =2.8.0.1, =0.8.0, =0.17.0 and more Source cves: CVE-2025-9624 Source advisory:...