CVE-2026-115715

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to denial of service via a specially crafted input value that is processed by an affected phonetic encoder of the analysis-phonetic plugin. An authenticated user with permission to write documents to or run...

EUVD-2026-116080

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to denial of service via a specially crafted input value that is processed by an affected phonetic encoder of the analysis-phonetic plugin. An authenticated user with permission to write documents to or run...

CVE-2026-115715 Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to denial of service via a specially crafted input value that is processed by an affected phonetic encoder of the analysis-phonetic plugin. An authenticated user with permission to write documents to or run...

CVE-2026-115715

Elasticsearch versions 8.0.0 through 8.19.23 , 9.0.0 through 9.4.8 , and 9.5.0 through 9.5.5 are vulnerable to a Denial of Service (DoS) via CWE-770 (Allocation of Resources Without Limits or Throttling). The flaw exists in the analysis-phonetic plugin when using the koelnerphonetik or haasephone...

Elasticsearch 8.19.24, 9.4.9, 9.5.6 Security Update (ESA-2026-235)

Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to denial of service via a specially crafted input value that is processed by an affected phonetic encoder of t...

com.floragunn:search-guard-ssl (5.0.0-alpha3-10a), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha3) +22 more potentially affected by CVE-2024-23444 via org.elasticsearch:elasticsearch (5.0.0-alpha3)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-ssl 5.0.0-alpha3-10a - org.elasticsearch.plugin:analysis-icu...

com.floragunn:search-guard-2 (5.0.0-alpha4-2a), com.floragunn:search-guard-ssl (5.0.0-alpha4-13a) +25 more potentially affected by CVE-2023-49921 via org.elasticsearch:elasticsearch (5.0.0-alpha4)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha4 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-2 5.0.0-alpha4-2a - com.floragunn:search-guard-ssl...

com.floragunn:search-guard-ssl (5.0.0-alpha3-10a), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha3) +22 more potentially affected by CVE-2021-22137 via org.elasticsearch:elasticsearch (5.0.0-alpha3)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-ssl 5.0.0-alpha3-10a - org.elasticsearch.plugin:analysis-icu...

com.floragunn:search-guard-ssl (5.0.0-alpha3-10a), org.elasticsearch.plugin:analysis-icu (5.0.0-alpha3) +22 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (5.0.0-alpha3)

org.elasticsearch:elasticsearch MAVEN version 5.0.0-alpha3 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - com.floragunn:search-guard-ssl 5.0.0-alpha3-10a - org.elasticsearch.plugin:analysis-icu...

co.diji:elasticsearch-mocksolrplugin (1.1.2), com.sonian:elasticsearch-jetty (0.19.4) +1 more potentially affected by CVE-2018-3824 via org.elasticsearch:elasticsearch (0.19.2)

org.elasticsearch:elasticsearch MAVEN version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - co.diji:elasticsearch-mocksolrplugin 1.1.2 - com.sonian:elasticsearch-jetty 0.19.4 -...

co.diji:elasticsearch-mocksolrplugin (1.1.2), com.sonian:elasticsearch-jetty (0.19.4) +1 more potentially affected by CVE-2021-22144 via org.elasticsearch:elasticsearch (0.19.2)

org.elasticsearch:elasticsearch MAVEN version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - co.diji:elasticsearch-mocksolrplugin 1.1.2 - com.sonian:elasticsearch-jetty 0.19.4 -...

co.diji:elasticsearch-mocksolrplugin (1.1.2), com.sonian:elasticsearch-jetty (0.19.4) +1 more potentially affected by CVE-2021-22135 via org.elasticsearch:elasticsearch (0.19.2)

org.elasticsearch:elasticsearch MAVEN version 0.19.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - co.diji:elasticsearch-mocksolrplugin 1.1.2 - com.sonian:elasticsearch-jetty 0.19.4 -...