org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.1), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.1) +3 more potentially affected by CVE-2026-103006 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.1)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.1 Source cves: CVE-2026-103006 Source advisory: MEND:CVE-2026-103006...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.2) +3 more potentially affected by CVE-2026-102411 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.2)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.2 Source cves: CVE-2026-102411 Source advisory: MEND:CVE-2026-102411...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.2) +3 more potentially affected by CVE-2026-94408 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.2)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.2 Source cves: CVE-2026-94408 Source advisory: MEND:CVE-2026-94408...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.3) +4 more potentially affected by CVE-2026-94397 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.3)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-94397 Source advisory: MEND:CVE-2026-94397...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.3) +4 more potentially affected by CVE-2026-94396 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.3)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-94396 Source advisory: MEND:CVE-2026-94396...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.3) +4 more potentially affected by CVE-2026-94399 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.3)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-94399 Source advisory: MEND:CVE-2026-94399...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.3) +4 more potentially affected by CVE-2026-94398 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.3)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.5.3 Source cves: CVE-2026-94398 Source advisory: MEND:CVE-2026-94398...

org.elasticsearch.plugin:x-pack-esql (>=9.5.0, <=9.5.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.5.0, <=9.5.2) +3 more potentially affected by CVE-2026-82294 via org.elasticsearch:elasticsearch (>=9.5.0, <=9.5.2)

org.elasticsearch:elasticsearch MAVEN version =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.0, =9.5.2 Source cves: CVE-2026-82294 Source advisory: MEND:CVE-2026-82294...

org.elasticsearch.plugin:x-pack-esql (9.5.0), org.elasticsearch.plugin:x-pack-esql-compute (9.5.0) +3 more potentially affected by CVE-2026-72645 via org.elasticsearch:elasticsearch (9.5.0)

org.elasticsearch:elasticsearch MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.plugin:x-pack-esql 9.5.0 - org.elasticsearch.plugin:x-pack-esql-compute 9.5.0 -...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.4), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.4) +4 more potentially affected by CVE-2026-72678 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.4)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.2, =9.4.4 Source cves: CVE-2026-72678 Source advisory: MEND:CVE-2026-72678...

org.elasticsearch.plugin:x-pack-esql (9.5.0), org.elasticsearch.plugin:x-pack-esql-compute (9.5.0) +3 more potentially affected by CVE-2026-72678 via org.elasticsearch:elasticsearch (9.5.0)

org.elasticsearch:elasticsearch MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.plugin:x-pack-esql 9.5.0 - org.elasticsearch.plugin:x-pack-esql-compute 9.5.0 -...

org.elasticsearch.plugin:x-pack-esql (9.5.0), org.elasticsearch.plugin:x-pack-esql-compute (9.5.0) +3 more potentially affected by CVE-2026-72687 via org.elasticsearch:elasticsearch (9.5.0)

org.elasticsearch:elasticsearch MAVEN version 9.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch.plugin:x-pack-esql 9.5.0 - org.elasticsearch.plugin:x-pack-esql-compute 9.5.0 -...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.3), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.3) +4 more potentially affected by CVE-2026-72683 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.3)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.3 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.4.2 Source cves: CVE-2026-72683 Source advisory: MEND:CVE-2026-72683...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.2) +4 more potentially affected by CVE-2026-56149 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.2)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.2 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.4.2 Source cves: CVE-2026-56149 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-17821213...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.2) +4 more potentially affected by CVE-2026-56148 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.2)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.2 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.4.2 Source cves: CVE-2026-56148 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-17821211...

org.elasticsearch.plugin:x-pack-esql (>=9.4.0, <=9.4.2), org.elasticsearch.plugin:x-pack-esql-compute (>=9.4.0, <=9.4.2) +4 more potentially affected by CVE-2026-56149 via org.elasticsearch:elasticsearch (>=9.4.0, <=9.4.2)

org.elasticsearch:elasticsearch MAVEN version =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.0, =9.4.2 - pl.allegro.tech.elasticsearch.plugin:elasticsearch-analysis-morfologik 9.4.2 Source cves: CVE-2026-56149 Source advisory: MEND:CVE-2026-56149...

ROOT-APP-MAVEN-CVE-2025-68390 CVE-2025-68390 in io.root.org.elasticsearch.plugin:x-pack-core - Patched by Root

Root has patched CVE-2025-68390 in the io.root.org.elasticsearch.plugin:x-pack-core package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-68384 CVE-2025-68384 in io.root.org.elasticsearch.plugin:x-pack-security - Patched by Root

Root has patched CVE-2025-68384 in the io.root.org.elasticsearch.plugin:x-pack-security package for Root:Maven. Multiple fixed versions available...

Denial Of Service (DoS)

org.elasticsearch.plugin, x-pack-security is vulnerable to Denial of Service DoS. The vulnerability is due to the lack of limits or throttling on user settings data allocation, which allows a low-privileged authenticated attacker to submit oversized data and trigger excessive memory allocation...

org.elasticsearch.client:x-pack-transport (6.8.14) potentially affected by CVE-2025-68390 via org.elasticsearch.plugin:x-pack-core (6.8.14)

org.elasticsearch.plugin:x-pack-core MAVEN version 6.8.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch.plugin:x-pack-core and may be impacted: - org.elasticsearch.client:x-pack-transport 6.8.14 Source cves: CVE-2025-68390 Source...