AZL-98445 CVE-2026-78607 affecting package rubygem-elasticsearch 8.9.0-1

Missing Authorization CWE-862 in the Elasticsearch custom inference service can lead to information disclosure via Privilege Abuse CAPEC-122. A user holding only inference execution privileges could cause outbound inference traffic to be directed to a destination of their choosing and could cause...

AZL-98448 CVE-2026-56143 affecting package rubygem-elasticsearch 8.9.0-1

Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted request that causes excessive memory consumption, which may render the affected node...

CVE-2022-23712 affecting package rubygem-elasticsearch 8.2.0-1

CVE-2022-23712 affecting package rubygem-elasticsearch 8.2.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-22134 affecting package rubygem-elasticsearch 7.6.0-1

CVE-2021-22134 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-7021 affecting package rubygem-elasticsearch 7.6.0-1

CVE-2020-7021 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-7019 affecting package rubygem-elasticsearch 7.6.0-1

CVE-2020-7019 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...

CVE-2020-7014 affecting package rubygem-elasticsearch 7.6.0-1

CVE-2020-7014 affecting package rubygem-elasticsearch 7.6.0-1. An upgraded version of the package is available that resolves this issue...