EUVD-2025-2534

Malicious code in bioql PyPI...

EUVD-2023-0397

Malicious code in bioql PyPI...

EUVD-2022-6546

Malicious code in bioql PyPI...

EUVD-2022-45047

Malicious code in bioql PyPI...

GHSA-CPQ7-6GPM-G9RC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2025-9287 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-95M3-7Q98-8XR5 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2025-9288 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-CPQ7-6GPM-G9RC vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, opensearch-dashboards-fips, opensearch-dashboards...

GHSA-95M3-7Q98-8XR5 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, opensearch-dashboards-fips, opensearch-dashboards...

CVE-2025-9287 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, opensearch-dashboards-fips, opensearch-dashboards...

Linux Distros Unpatched Vulnerability : CVE-2023-45807

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 2021. There is an issue with the...

Linux Distros Unpatched Vulnerability : CVE-2016-10245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient sanitization of the query parameter in templates/html/searchopensearch.php could lead to reflected cross-site scripting or iframe injection...

Sensitive Information Disclosure

org.opensearch.plugin:opensearch-security is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper enforcement of Field Level Security FLS rules due to member attributes of excluded objects still being accessible through search queries, allowing reconstruction of...

Sensitive Information Disclosure

OpenSearch is vulnerable to Sensitive Information Disclosure. The vulnerability is due to redacted values being retrievable through range queries and the fields option in the search API...

Linux Distros Unpatched Vulnerability : CVE-2023-23613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSearch is an open source distributed and RESTful search engine. In affected versions there is an issue in the implementation of field-level security FLS and...

Malicious code in opensearch-console-server (npm)

The package opensearch-console-server was found to contain malicious code...

MAL-2025-9145 Malicious code in @opensearch/datemath (npm)

The package @opensearch/datemath was found to contain malicious code...

MAL-2025-28332 Malicious code in opensearch-console-server (npm)

The package opensearch-console-server was found to contain malicious code...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure in the application of Field Level Security FLS rules to fields that are members of an object within a source document. An attacker can gain unauthorized access to sensitive data by reconstructing the contents of...