CVE-2023-31413

Summary of CVE-2023-31413 (Filebeat httpjson input): A bug in the httpjson input in Filebeat allows the contents of the Authorization or Proxy-Authorization header to be leaked into logs when debug logging is enabled. Affected versions are Filebeat up to 7.17.9 and 8.6.2. The root cause is a logg...

CVE-2025-68383

CVE-2025-68383 affects Filebeat Syslog parser and the Libbeat Dissect processor. A malformed Syslog message or a malicious tokenizer pattern in the Dissect configuration can trigger a Buffer Overflow (CAPEC-100) and cause a denial of service (panic/crash) of the Filebeat process. Exploitation det...

CVE-2026-78588

Filebeat (Elastic) is affected by an uncontrolled resource allocation vulnerability (CWE-770) in its HTTP ingestion endpoint . An attacker with network access to this endpoint can send specially crafted compressed requests that exhaust the memory of the Filebeat process, causing a denial of servi...