1394 matches found
CVE-2026-44979 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-22G5-R2X5-97CX vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-59711 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-RCVQ-M9J9-6F4G vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-X426-X7CC-3FPC vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
CVE-2026-59710 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
GHSA-RMMH-P597-PPVV vulnerabilities
Vulnerabilities for packages: opensearch-dashboards...
PT-2026-79120
Name of the Vulnerable Software and Affected Versions OpenSearch Dashboards versions prior to 3.8 Description Improper input validation in the Time Series Visual Builder TSVB plugin allows an authenticated remote user to execute arbitrary code on the server. This is achieved by sending a crafted...
CVE-2026-18420: Improperly Controlled Modification of Object Prototype Attributes
Improper input validation in the Time Series Visual Builder TSVB plugin in OpenSearch Dashboards allows an authenticated remote user to execute arbitrary code on the server via a crafted JSON payload to the metrics visualization API endpoint. This issue is a form of prototype pollution that enabl...
CVE-2026-75897
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request...
CVE-2026-75897 Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request...
EUVD-2026-61064
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request...
CVE-2026-75897 Uncontrolled Resource Consumption in Capabilities Route in OpenSearch Dashboards
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request...
CVE-2026-75897
OpenSearch Dashboards' capabilities route handler does not bound request payload size, enabling unauthenticated remote attackers to exhaust server resources via a crafted HTTP request, causing denial of service (CVSS 7.5 HIGH). No exploitation observed; AWS security bulletin and download links ar...
PT-2026-77229
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request...
CVE-2026-75897: Improper Validation of Specified Quantity in Input
Improper input validation in the capabilities route handler in OpenSearch Dashboards - the size of the request payload is not bounded - might allow remote attackers to cause a denial of service via a crafted HTTP request...
CVE-2026-67314 vulnerabilities
Vulnerabilities for packages: langfuse, lerna, wazuh-dashboard-fips, gitlab-rails-ce, semaphore, kibana, wazuh-dashboard, jitsucom-jitsu, redisinsight, opensearch-dashboards, opensearch-dashboards-fips, langfuse-fips, gitlab-rails-ce-fips, awx, prism, kubeflow-centraldashboard, librechat,...
GHSA-38GX-CFQF-F652 vulnerabilities
Vulnerabilities for packages: langfuse, lerna, wazuh-dashboard-fips, semaphore, kibana, wazuh-dashboard, jitsucom-jitsu, redisinsight, opensearch-dashboards, opensearch-dashboards-fips, langfuse-fips, awx, prism, kubeflow-centraldashboard, librechat, nextcloud-server...