EUVD-2026-46433

Reachable Assertion CWE-617 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. A specially crafted search request containing a null value in a specific query clause causes an internal assertion to be raised during query parsing. Because Elasticsearch treats...

CVE-2026-63140

CVE-2026-63140 describes a Reachable Assertion (CWE-617) in Elasticsearch that can cause denial of service. A specially crafted search containing a null value in a specific query clause triggers an internal assertion during query parsing, which Elasticsearch treats as a fatal error and terminates...

CVE-2026-63140 Reachable Assertion in Elasticsearch Leading to Denial of Service

Reachable Assertion CWE-617 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153. A specially crafted search request containing a null value in a specific query clause causes an internal assertion to be raised during query parsing. Because Elasticsearch treats...

PT-2026-62116

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description An issue exists where a specially crafted search request containing a null value in a specific query clause triggers an internal assertion during query parsing. Since assertion failures...

CVE-2026-59892

OpenTelemetry JavaScript is the OpenTelemetry JavaScript client. Prior to 2.9.0, @opentelemetry/propagator-jaeger decodes incoming uber-trace-id and uberctx- HTTP header values with decodeURIComponent without handling decode errors, allowing an unauthenticated remote attacker to send a malformed...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: skopeo-fips, migrate, tetragon-fips, ansible-operator-fips, ucd, crossplane-provider-aws-s3-fips, otel-cli, apply-cve-bump, longhorn-manager-fips, newrelic-infrastructure-agent, crossplane-provider-azure-resources, nrdot-collector-k8s, apisix-ingress-controller, aact...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: skopeo-fips, migrate, tetragon-fips, ansible-operator-fips, ucd, crossplane-provider-aws-s3-fips, otel-cli, apply-cve-bump, longhorn-manager-fips, newrelic-infrastructure-agent, crossplane-provider-azure-resources, nrdot-collector-k8s, apisix-ingress-controller, aact...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: gomplate, opensearch-k8s-operator, rabbitmq-default-user-credential-updater, kubernetes-dashboard, rancher-machine, xeol, keda, helm-mapkubeapis, gostatsd, nova, gitlab-runner, newrelic-nri-statsd, trillian, nri-kubernetes, cloudnative-pg, conftest,...

CVE-2026-33814 vulnerabilities

Vulnerabilities for packages: elastic-agent, crossplane-provider-aws-guardduty-fips, virt-controller, karpenter-fips, nrdot-collector-k8s, crossplane-provider-aws-dynamodb, helm-exporter, rancher-support-bundle-kit, flux, drone, chainloop-artifact-cas-fips, nfs-subdir-external-provisioner,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: istio, kiali, k9s, rancher, kots, teleport, datadog-agent, falcoctl, gitlab-kas, juicefs-csi-driver, kubernetes-dashboard-api, sonobuoy, argo-workflows, kpt, kwok, vcluster, kubevela, headlamp, cri-tools, postgres-operator, kubernetes, percona-server-mongodb-operator...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: istio, kiali, k9s, rancher, kots, teleport, datadog-agent, falcoctl, gitlab-kas, juicefs-csi-driver, kubernetes-dashboard-api, sonobuoy, argo-workflows, kpt, kwok, vcluster, kubevela, headlamp, cri-tools, postgres-operator, kubernetes, percona-server-mongodb-operator...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: spiffe-helper, terraform-provider-pagerduty, lazygit, opensearch-k8s-operator, rabbitmq-default-user-credential-updater, kubernetes-dashboard, cri-tools, rancher-machine, xeol, keda, helm-mapkubeapis, podman, gostatsd, nova, timescaledb-parallel-copy,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: gomplate, istio, octo-sts, rancher, sops, certificate-transparency, kots, dgraph, kyverno-policy-reporter, addon-resizer, argo-workflows, witness, bank-vaults, vcluster, kube-vip-cloud-provider, cri-tools, xeol, keda, traefik, step-kms-plugin,...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: gomplate, istio, octo-sts, rancher, sops, certificate-transparency, kots, dgraph, kyverno-policy-reporter, addon-resizer, argo-workflows, witness, bank-vaults, vcluster, kube-vip-cloud-provider, cri-tools, xeol, keda, traefik, step-kms-plugin,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: elastic-agent, migrate, nemo, crossplane-provider-aws-opensearch, crossplane-provider-aws-guardduty-fips, ansible-operator-fips, ucd, crossplane-provider-aws-s3-fips, otel-cli, kubernetes-csi-external-provisioner-fips, longhorn-manager-fips,...

GHSA-FRHW-MQJ2-WXW2 vulnerabilities

Vulnerabilities for packages: spiffe-helper, opensearch-k8s-operator, cri-tools, rancher-machine, xeol, helm-mapkubeapis, wazero, gostatsd, nova, timescaledb-parallel-copy, newrelic-nri-statsd, renovate, trillian, conftest, policy-controller, incert, delve, kubernetes-dashboard-metrics-scraper, q...

GHSA-WCW9-47FP-RRFR vulnerabilities

Vulnerabilities for packages: istio, octo-sts, spiffe-helper, wave, kustomize, certificate-transparency, dbmate, sops, gotestsum, tofu-controller, opensearch-k8s-operator, kubeflow, checksec, kafka-proxy, fq, kube-vip-cloud-provider, elvish, cri-tools, rancher-machine, spqr,...

GHSA-RJCG-56PH-3QVG vulnerabilities

Vulnerabilities for packages: istio, octo-sts, spiffe-helper, wave, kustomize, certificate-transparency, dbmate, sops, gotestsum, tofu-controller, opensearch-k8s-operator, kubeflow, checksec, kafka-proxy, fq, kube-vip-cloud-provider, elvish, cri-tools, rancher-machine, spqr,...

GHSA-QH38-484V-W52X vulnerabilities

Vulnerabilities for packages: istio, octo-sts, spiffe-helper, wave, kustomize, certificate-transparency, dbmate, sops, gotestsum, tofu-controller, opensearch-k8s-operator, kubeflow, checksec, kafka-proxy, fq, kube-vip-cloud-provider, elvish, cri-tools, rancher-machine, spqr,...

CVE-2025-47912 vulnerabilities

Vulnerabilities for packages: istio, octo-sts, spiffe-helper, wave, kustomize, certificate-transparency, dbmate, sops, gotestsum, tofu-controller, opensearch-k8s-operator, kubeflow, checksec, kafka-proxy, fq, kube-vip-cloud-provider, elvish, cri-tools, rancher-machine, spqr,...