ROOT-APP-MAVEN-CVE-2025-68384 CVE-2025-68384 in io.root.org.elasticsearch.plugin:x-pack-security - Patched by Root

Root has patched CVE-2025-68384 in the io.root.org.elasticsearch.plugin:x-pack-security package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2025-68390 CVE-2025-68390 in io.root.org.elasticsearch.plugin:x-pack-core - Patched by Root

Root has patched CVE-2025-68390 in the io.root.org.elasticsearch.plugin:x-pack-core package for Root:Maven. Multiple fixed versions available...

Denial Of Service (DoS)

org.elasticsearch.plugin, x-pack-security is vulnerable to Denial of Service DoS. The vulnerability is due to the lack of limits or throttling on user settings data allocation, which allows a low-privileged authenticated attacker to submit oversized data and trigger excessive memory allocation...

net.sc8s:elastic-testkit_2.13 (>=0.102.0 <=0.108.0), org.elasticsearch.plugin:transport-netty4 (>=9.0.0 <=9.1.10) +4 more potentially affected by CVE-2025-37731 via org.elasticsearch:elasticsearch-ssl-config (>=9.0.0-beta1 <=9.1.7)

org.elasticsearch:elasticsearch-ssl-config MAVEN version =9.0.0-beta1, =0.102.0, =9.0.0, =9.0.0, =9.1.4, =9.0.0, =9.0.0, =9.1.10 Source cves: CVE-2025-37731 Source advisory: SNYK:JAVA-ORGELASTICSEARCH-14417579...

EUVD-2017-17392

Malware in sbrugna...

EUVD-2018-15610

Malware in sbrugna...

EUVD-2017-17401

Malware in sbrugna...

EUVD-2016-1546

Malware in sbrugna...

EUVD-2017-3100

Malware in sbrugna...

EUVD-2018-15607

Malware in sbrugna...

EUVD-2017-17389

Malware in sbrugna...

EUVD-2017-17398

Malware in sbrugna...

EUVD-2017-17399

Malware in sbrugna...

EUVD-2017-17396

Malware in sbrugna...

EUVD-2018-15611

Malware in sbrugna...

EUVD-2017-17400

Malware in sbrugna...

EUVD-2017-17397

Malware in sbrugna...

EUVD-2017-17394

Malware in sbrugna...

EUVD-2022-4583

Malicious code in bioql PyPI...

Information Disclosure

org.elasticsearch.plugin: x-pack-security is vulnerable to Information Disclosure. The vulnerability arises from the failure to enforce search restrictions during cross-cluster searches when an API key grants both search and replication rights to an index, which allows an attacker to access...