GHSA-P72G-PV48-7W9X vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-54988 vulnerabilities

Vulnerabilities for packages: opensearch...

GHSA-73M2-QFQ3-56CX vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-27820 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-9624 vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-8885 vulnerabilities

Vulnerabilities for packages: sonarqube, cassandra, opensearch...

GHSA-67MF-3CR5-8W23 vulnerabilities

Vulnerabilities for packages: sonarqube, cassandra, opensearch...

Airflow externalLogUrl Permission Bypass

1. Summary The externalLogUrl endpoint in Airflow’s FastAPI enforces only the weaker Task Instance access permission TASKINSTANCE instead of the intended Task Logs permission TASKLOGS. As a result, low-privileged users who are not authorized to view task logs can still obtain external log access...

Denial Of Service (DoS)

OpenSearch is vulnerable to Denial Of Service DoS. The vulnerability is due to the handling of overly complex querystring inputs, which allows an attacker to submit specially crafted queries that exhaust system resources and trigger a DoS condition...

CVE-2025-9624

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions between 3.0.0 and 3.3.0 and OpenSearch 2.19.4...

GHSA-MW3V-MMFW-3X2G vulnerabilities

Vulnerabilities for packages: opensearch...

CVE-2025-9624 vulnerabilities

Vulnerabilities for packages: opensearch...

Linux Distros Unpatched Vulnerability : CVE-2025-9624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versio...

GHSA-554W-WPV2-VW27 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards-fips, opensearch-dashboards, arangodb, gitlab-rails-ce, kubeflow-pipelines, argo-workflows, gitlab-rails-ce-fips, kibana, kubeflow-centraldashboard, jitsucom-jitsu...

CVE-2025-66030 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards-fips, opensearch-dashboards, arangodb, gitlab-rails-ce, kubeflow-pipelines, argo-workflows, gitlab-rails-ce-fips, kibana, kubeflow-centraldashboard, jitsucom-jitsu...

GHSA-5GFM-WPXJ-WJGQ vulnerabilities

Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards-fips, opensearch-dashboards, arangodb, gitlab-rails-ce, kubeflow-pipelines, argo-workflows, gitlab-rails-ce-fips, kibana, kubeflow-centraldashboard, jitsucom-jitsu...

CVE-2025-12816 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards-fips, opensearch-dashboards, arangodb, gitlab-rails-ce, kubeflow-pipelines, argo-workflows, gitlab-rails-ce-fips, kibana, kubeflow-centraldashboard, jitsucom-jitsu...

CVE-2025-66031 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards-fips, opensearch-dashboards, arangodb, gitlab-rails-ce, kubeflow-pipelines, argo-workflows, gitlab-rails-ce-fips, kibana, kubeflow-centraldashboard, jitsucom-jitsu...

GHSA-65CH-62R8-G69G vulnerabilities

Vulnerabilities for packages: kubeflow-katib, opensearch-dashboards-fips, opensearch-dashboards, arangodb, gitlab-rails-ce, kubeflow-pipelines, argo-workflows, gitlab-rails-ce-fips, kibana, kubeflow-centraldashboard, jitsucom-jitsu...

OpenSearch is vulnerable to DoS via complex query_string inputs

A vulnerability in OpenSearch allows attackers to cause Denial of Service DoS by submitting complex querystring inputs. This issue affects all OpenSearch versions below 2.19.4 and versions 3.0.0 through 3.2.0...