MAL-2025-22182 Malicious code in hapi-logstash-tester (npm)

The package hapi-logstash-tester was found to contain malicious code...

MAL-2025-32760 Malicious code in sc-bunyan-logstash-amqp (npm)

The package sc-bunyan-logstash-amqp was found to contain malicious code...

CVE-2025-47907 vulnerabilities

Vulnerabilities for packages: metrics-server, gitlab-cng, sftpgo-plugin-eventstore, kube-metrics-adapter, bazelisk, newrelic-nri-kube-events, go-md2man, aws-network-policy-agent, ingress-nginx-controller, lazygit, cass-operator, git-credential-oauth, secrets-store-csi-driver-provider-azure, gatus...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: metrics-server, gitlab-cng, sftpgo-plugin-eventstore, kube-metrics-adapter, bazelisk, newrelic-nri-kube-events, go-md2man, aws-network-policy-agent, ingress-nginx-controller, lazygit, cass-operator, git-credential-oauth, secrets-store-csi-driver-provider-azure, gatus...

The vulnerability of the agent installer for data collection and delivery in Elasticsearch or Logstash Elastic Beats allows a perpetrator to enhance their privileges.

The vulnerability of the agent installer for data collection and delivery in Elasticsearch or Logstash Elastic Beats is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the agent installer for data collection and delivery in Elasticsearch or Logstash Elastic Beats allows a perpetrator to enhance their privileges.

The vulnerability of the agent installer for data collection and delivery in Elasticsearch or Logstash Elastic Beats is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2025-46336 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails...

GHSA-9J94-67JR-4CQJ vulnerabilities

Vulnerabilities for packages: logstash, ruby3.3-rails, ruby3.2-rails, ruby3.4-rails...

GHSA-GJH7-P2FX-99VX vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.4-rack, ruby3.2-rails, ruby3.3-rack, ruby3.2-rack, ruby4.0-rack, ruby3.3-rails, ruby3.4-rails, logstash...

CVE-2025-46727 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.4-rack, ruby3.2-rails, ruby3.3-rack, ruby3.2-rack, ruby4.0-rack, ruby3.3-rails, ruby3.4-rails, logstash...

GHSA-GJH7-P2FX-99VX vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, logstash, ruby3.3-rack, ruby3.2-rails, ruby3.4-rack, ruby3.3-rails, ruby3.2-rack, ruby3.4-rails...

CVE-2025-46336 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, logstash, ruby3.4-rails...

CVE-2025-46727 vulnerabilities

Vulnerabilities for packages: ruby4.0-rack, logstash, ruby3.3-rack, ruby3.2-rails, ruby3.4-rack, ruby3.3-rails, ruby3.2-rack, ruby3.4-rails...

GHSA-9J94-67JR-4CQJ vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, ruby3.3-rails, logstash, ruby3.4-rails...

CVE-2025-37730

Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle MitM attack in “client” mode, as hostname verification in TCP output was not being performed when the sslverificationmode = full was set...

BIT-LOGSTASH-2025-37730 Logstash Improper Certificate Validation in TCP output

Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle MitM attack in “client” mode, as hostname verification in TCP output was not being performed when the sslverificationmode = full was set...

CVE-2025-37730

Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle MitM attack in “client” mode, as hostname verification in TCP output was not being performed when the sslverificationmode = full was set...

Improper Certificate Validation

Overview logstash-output-tcp is an a Logstash plugin required to be installed on top of the Logstash core pipeline using $LSHOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program. Affected versions of this package are vulnerable to Improper Certificate Validation due to t...

CVE-2025-37730 Logstash Improper Certificate Validation in TCP output

Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle MitM attack in “client” mode, as hostname verification in TCP output was not being performed when the sslverificationmode = full was set...

CVE-2025-37730

CVE-2025-37730 concerns improper certificate validation in Logstash’s TCP output, enabling MitM in “client” mode due to hostname verification not occurring when ssl_verification_mode is set to full. Affected component is the Logstash TCP output plugin (logstash-output-tcp). The root cause is lack...