1239 matches found
GHSA-8R9Q-7V3J-JR4G vulnerabilities
Vulnerabilities for packages: langfuse...
CVE-2026-0621 vulnerabilities
Vulnerabilities for packages: langfuse...
CLEANSTART-2026-FR57243 Cancelling a query (e
Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-LD23143 Cancelling a query (e
Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-IL55587 Cancelling a query (e
Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-CB20757 Cancelling a query (e
Multiple security vulnerabilities affect the opensearch-k8s-operator-fips package. Cancelling a query e. See references for individual vulnerability details...
CVE-2025-68428 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2025-57810 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-8MVJ-3J78-4QMW vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-F8CM-6447-X5H2 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-8MVJ-3J78-4QMW vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
CVE-2025-68428 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
CVE-2025-57810 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
GHSA-F8CM-6447-X5H2 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...
CVE-2023-31141
OpenSearch is open-source software suite for search, analytics, and observability applications. Prior to versions 1.3.10 and 2.7.0, there is an issue with the implementation of fine-grained access control rules document-level security, field-level security and field masking where they are not...
CVE-2024-39900
OpenSearch Dashboards Reports allows ‘Report Owner’ export and share reports from OpenSearch Dashboards. An issue in the OpenSearch reporting plugin allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when...
CVE-2024-39901
OpenSearch Observability is collection of plugins and applications that visualize data-driven events. An issue in the OpenSearch observability plugins allows unintended access to private tenant resources like notebooks. The system did not properly check if the user was the resource author when...
CVE-2025-23671
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sav WP OpenSearch wp-opensearch allows Stored XSS.This issue affects WP OpenSearch: from n/a through = 1.0...
CVE-2022-31115
opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. In versions prior to 2.0.1 the ruby YAML.load function was used instead of YAML.safeload. As a result opensearch-ruby 2.0.0 and prior can lead to unsafe deserialization using YAML.load if the response is of type YAML. ...