16 matches found
AZL-106721 CVE-2026-102411 affecting package rubygem-elasticsearch 8.9.0-1
Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to Denial of Service via Excessive Allocation CAPEC-130. Elasticsearch enforces a size limit on the user-supplied metadata field for each individual template resource, but does not limit the total memory used...
AZL-106724 CVE-2026-103006 affecting package rubygem-elasticsearch 8.9.0-1
Uncontrolled Recursion CWE-674 in Elasticsearch can lead to Denial of Service via a specially crafted, deeply nested request submitted to the aggregation feature of the search API. Elasticsearch contains an uncontrolled recursion weakness in its search aggregation processing. An authenticated use...
AZL-106715 CVE-2026-102407 affecting package rubygem-elasticsearch 8.9.0-1
Incorrect Authorization CWE-863 in Elasticsearch can lead to unauthorized data stream modification via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An authenticated user with sufficient privileges over a single resource could use the Modify Data Streams API to modify a data...
AZL-106718 CVE-2026-102404 affecting package rubygem-elasticsearch 8.9.0-1
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130. A low-privileged authenticated user can submit a specially crafted query that causes uncontrolled memory growth in the query processing engine, resulting in an out-of-memor...
AZL-104942 CVE-2026-94408 affecting package rubygem-elasticsearch 8.9.0-1
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
AZL-104945 CVE-2026-94397 affecting package rubygem-elasticsearch 8.9.0-1
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
AZL-104954 CVE-2026-94399 affecting package rubygem-elasticsearch 8.9.0-1
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead denial of service via Excessive Allocation CAPEC-130...
AZL-104948 CVE-2026-82294 affecting package rubygem-elasticsearch 8.9.0-1
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
AZL-104951 CVE-2026-82300 affecting package rubygem-elasticsearch 8.9.0-1
Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
AZL-98445 CVE-2026-78607 affecting package rubygem-elasticsearch 8.9.0-1
Missing Authorization CWE-862 in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse CAPEC-122. A user holding only inference execution privileges could cause outbound inference traffic to be directed to a destination of their choosing and could cause...
AZL-98448 CVE-2026-56143 affecting package rubygem-elasticsearch 8.9.0-1
Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...
CVE-2022-23712 affecting package rubygem-elasticsearch 8.2.0-1
CVE-2022-23712 affecting package rubygem-elasticsearch 8.2.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-22134 affecting package rubygem-elasticsearch 7.6.0-1
CVE-2021-22134 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...
CVE-2020-7014 affecting package rubygem-elasticsearch 7.6.0-1
CVE-2020-7014 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...