CVE-2026-34477 vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, neo4j, solr, apache-activemq-artemis, sonarqube, apache-pulsar, celeborn, akhq, wavefront-proxy, logstash, strimzi-kafka-operator, opensearch, spark, flink, airflow, kafka, infinispan, zipkin...

GHSA-6HG6-V5C8-FPHQ vulnerabilities

Vulnerabilities for packages: kserve-modelmesh, neo4j, solr, apache-activemq-artemis, sonarqube, apache-pulsar, celeborn, akhq, wavefront-proxy, logstash, strimzi-kafka-operator, opensearch, spark, flink, airflow, kafka, infinispan, zipkin...

CVE-2026-34478 vulnerabilities

Vulnerabilities for packages: geoserver, camunda, commercial-elasticsearch, akhq, kafka, hadoop-fips, elasticsearch, lmcache-cuda-12.8, camunda-zeebe, airflow, pinot-fips, apache-activemq, flink, spark-kubernetes-operator-fips, zaproxy, celeborn, neo4j, strimzi-kafka-operator,...

GHSA-445C-VH5M-36RJ vulnerabilities

Vulnerabilities for packages: geoserver, camunda, commercial-elasticsearch, akhq, kafka, hadoop-fips, elasticsearch, lmcache-cuda-12.8, camunda-zeebe, airflow, pinot-fips, apache-activemq, flink, spark-kubernetes-operator-fips, zaproxy, celeborn, neo4j, strimzi-kafka-operator,...

GHSA-6HG6-V5C8-FPHQ vulnerabilities

Vulnerabilities for packages: geoserver, camunda, commercial-elasticsearch, akhq, kafka, hadoop-fips, elasticsearch, lmcache-cuda-12.8, camunda-zeebe, airflow, pinot-fips, apache-activemq, flink, spark-kubernetes-operator-fips, zaproxy, celeborn, neo4j, strimzi-kafka-operator,...

CVE-2026-34477 vulnerabilities

Vulnerabilities for packages: geoserver, camunda, commercial-elasticsearch, akhq, kafka, hadoop-fips, elasticsearch, lmcache-cuda-12.8, camunda-zeebe, airflow, pinot-fips, apache-activemq, flink, spark-kubernetes-operator-fips, zaproxy, celeborn, neo4j, strimzi-kafka-operator,...

BIT-LOGSTASH-2026-33466 Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

PT-2026-32434

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

CVE-2026-33466

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

Logstash 8.x < 8.19.14 / 9.x < 9.2.8 / 9.3.x < 9.3.3 Path Traversal (ESA-2026-29)

The version of Logstash installed on the remote host is 8.x prior to 8.19.14, 9.x prior to 9.2.8, or 9.3.x prior to 9.3.3. It is, therefore, affected by a path traversal vulnerability: - The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

CLEANSTART-2026-GE08280 Ruby JSON is a JSON implementation for Ruby

Multiple security vulnerabilities affect the logstash-fips package. Ruby JSON is a JSON implementation for Ruby. See references for individual vulnerability details...

CLEANSTART-2026-RZ30606 Ruby JSON is a JSON implementation for Ruby

Multiple security vulnerabilities affect the logstash-fips package. Ruby JSON is a JSON implementation for Ruby. See references for individual vulnerability details...

CLEANSTART-2026-CQ39708 Netty is an asynchronous, event-driven network application framework

Multiple security vulnerabilities affect the logstash-fips package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-IW08736 Uncontrolled Recursion vulnerability in Apache Commons Lang

Multiple security vulnerabilities affect the logstash-fips package. Uncontrolled Recursion vulnerability in Apache Commons Lang. See references for individual vulnerability details...

CLEANSTART-2026-OQ84658 Netty is an asynchronous, event-driven network application framework

Multiple security vulnerabilities affect the logstash-fips package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-BG72514 Uncontrolled Recursion vulnerability in Apache Commons Lang

Multiple security vulnerabilities affect the logstash-fips package. Uncontrolled Recursion vulnerability in Apache Commons Lang. See references for individual vulnerability details...

EUVD-2026-20526

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

CVE-2026-33466

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

CVE-2026-33466 Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

CVE-2026-33466 Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...