CVE-2024-54160-Opensearch-HTML-And-Injection-Stored-XSS

CVE-2024-54160-Opensearch-HTML-Injection + Stored XSS It was found that the Opensearch plugin called "reports" was vulnerable to HTML-injection in version 2.18.0. The report functionality allowed users to store HTML in the header and footer while creating a new report definition. Below is a quick...

pySigma-backend-opensearch

pySigma OpenSearch Backend This is the OpenSearch backend for pySigma. It provides the package sigma.backends.opensearch with two backend classes: OpensearchLuceneBackend - Converts Sigma rules to Lucene query syntax OpenSearchPPLBackend - Converts Sigma rules to PPL Piped Processing Language...

SecurityClaw

SecurityClaw — Framework Agente Autónomo de SOC Un agente autónomo modular y basado en habilidades del Centro de Operaciones de Seguridad SOC que monitorea datos de OpenSearch/Elasticsearch, construye memoria conductual basada en RAG y valida anomalías en tiempo real usando LLMs. Funcionalidades...

Malcolm

Malcolm Malcolm은 다음과 같은 목표를 염두에 두고 설계된 강력한 네트워크 트래픽 분석 도구 모음입니다: 사용하기 쉬움 – Malcolm은 전체 패킷 캡처PCAP 파일, Zeek 로그, Suricata 알림 형태의 네트워크 트래픽 데이터를 수용합니다. 이러한 아티팩트는 간단한 브라우저 기반 인터페이스를 통해 업로드하거나 경량 포워더를 사용하여 수동적으로 캡처하여 Malcolm으로 전달할 수 있습니다. 두 경우 모두 데이터는 자동으로 정규화, 강화 및 상관 분석됩니다. 강력한 트래픽 분석 – 네트워크 통신에 대한 가시...

CVE-2026-84367 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-2026-84368 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-6W3J-5FW6-R9VR vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

GHSA-GG4H-3HG2-GRPC vulnerabilities

Vulnerabilities for packages: opensearch-dashboards...

CVE-Wazuh

Wazuh Manager — NDJSON Injection in inventorysync via Agent-Controlled DataValue.index - Draft Enrolled agent can smuggle arbitrary OpenSearch bulk operations via DataValue.index. GHSA-ff9g-85jq-r3g3 ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual...

CVE-2026-67321 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, lerna, opensearch-dashboards, jitsucom-jitsu, kubeflow-centraldashboard, prism...

GHSA-3MCP-22MF-VRW3 vulnerabilities

Vulnerabilities for packages: nextcloud-server, langfuse, lerna, opensearch-dashboards, jitsucom-jitsu, kubeflow-centraldashboard, prism...

Sentora

Sentora Community Edition Self-hosted security stack for small/mid teams that don't have a dedicated SOC. Drop an agent on each endpoint, point them at the server, and you get SIEM logs, file integrity, package vulnerabilities, an OpenSearch-powered log explorer, autonomous AI triage and a SOAR...

CVE-2026-84942

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942

This stored cross-site scripting (XSS) vulnerability affects OpenSearch Dashboards . The root cause is a flaw in the checkForFunctionProperty validation routine within the Vega expression function, which failed to recurse into arrays of objects, allowing a function property nested inside an array...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

EUVD-2026-74074

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

CVE-2026-84942 Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

PT-2026-88317

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser sessions by saving a crafted Vega visualization. The...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: langfuse-fips, unleash-proxy, keep-fips, langfuse, gitlab-rails-ce-fips, tensorflow-gpu-jupyter, tileserver-gl, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards, wazuh-dashboard, unleash-fips, unleash, arangodb, keep, tileserver-gl-fips,...

GHSA-F65P-4M7J-42XC vulnerabilities

Vulnerabilities for packages: langfuse-fips, unleash-proxy, keep-fips, langfuse, gitlab-rails-ce-fips, tensorflow-gpu-jupyter, tileserver-gl, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards, wazuh-dashboard, unleash-fips, unleash, arangodb, keep, tileserver-gl-fips,...