dsiem

Dsiem Dsiem is a security event correlation engine for ELK stack, allowing the platform to be used as a dedicated and full-featured SIEM system. Dsiem provides OSSIM-style correlation for normalized logs/events, perform lookup/query to threat intelligence and vulnerability information sources, an...

CVE-2026-78594

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594 Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

CVE-2026-78594

Elastic APM Server is affected by an Improper Handling of Highly Compressed Data (CWE-409) vulnerability that causes a persistent denial of service . An authenticated user with write access to source map content can store specially crafted, highly compressed data that exhausts APM Server memory u...

EUVD-2026-70058

Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map content could store specially crafted, highly compressed content that exhausts the memory availabl...

APM Server 8.19.20, 9.4.5, 9.5.1 Security Update (ESA-2026-152)

Improper Handling of Highly Compressed Data in APM Server Leading to Persistent Denial of Service Improper Handling of Highly Compressed Data CWE-409 in APM Server can lead to a persistent denial of service via Excessive Allocation CAPEC-130. An authenticated user with write access to source map...

CVE-2026-78608

Missing Authorization CWE-862 in Kibana can lead to information disclosure via Privilege Abuse CAPEC-122. An authorization control was not applied to an internal Kibana APM integration function, allowing any authenticated Kibana user to read APM server credentials that should be restricted to use...

GO-2025-4252 vulnerabilities

Vulnerabilities for packages: beats-fips, elastic-agent, apm-server, cloudbeat-fips, cloudbeat, apm-server-fips...

GO-2023-2413 vulnerabilities

Vulnerabilities for packages: elastic-agent, apm-server, cloudbeat-fips, cloudbeat, elastic-agent-fips, apm-server-fips...

GO-2026-4360 vulnerabilities

Vulnerabilities for packages: apm-server, cloudbeat-fips, cloudbeat, beats, apm-server-fips...

GO-2025-4253 vulnerabilities

Vulnerabilities for packages: elastic-agent, apm-server, cloudbeat-fips, cloudbeat, elastic-agent-fips, apm-server-fips...

Elastic APM Server 8.x < 8.16.1 Information Disclosure (ESA-2024-41)

The version of Elastic APM Server installed on the remote host is 8.x prior to 8.16.1. It is, therefore, affected by an information disclosure vulnerability: - APM server logs could contain parts of the document body from a partially failed bulk index request. Depending on the nature of the...

GHSA-W2GR-585J-R428 vulnerabilities

Vulnerabilities for packages: apm-server, cloudbeat-fips, cloudbeat, beats, apm-server-fips...

CVE-2026-0528 vulnerabilities

Vulnerabilities for packages: apm-server, cloudbeat-fips, cloudbeat, beats, apm-server-fips...

EUVD-2024-0582

Malicious code in bioql PyPI...

EUVD-2024-2568

Malicious code in bioql PyPI...

EUVD-2025-13048

Malicious code in bioql PyPI...

CVE-2025-47910 vulnerabilities

Vulnerabilities for packages: neuvector, kyverno-notation-aws, cluster-api-azure-controller, pluto, render-template, kuma, tflint, aws-application-networking-k8s, opa, cerbos, nginx-prometheus-exporter, monstache, cluster-api-provider-vsphere, wal-g, regclient, containerd, linkerd2-cni-plugin,...

GHSA-8PJC-487G-W6P2 vulnerabilities

Vulnerabilities for packages: neuvector, kyverno-notation-aws, cluster-api-azure-controller, pluto, render-template, kuma, tflint, aws-application-networking-k8s, opa, cerbos, nginx-prometheus-exporter, monstache, cluster-api-provider-vsphere, wal-g, regclient, containerd, linkerd2-cni-plugin,...