CGA-2g8w-5hf3-wqcj

Published

Last updated

Package

opensearch-dashboards-2-dashboards-search-relevance

Latest Update

Fixed

Fixed Version

2.19.4-r5

Aliases

CVE-2025-68428
GHSA-f8cm-6447-x5h2

Severity

Unknown

References

https://nvd.nist.gov/vuln/detail/CVE-2025-68428
https://github.com/advisories/GHSA-f8cm-6447-x5h2

Updates

Status

Fixed

Fixed version

2.19.4-r5

Status

Pending upstream fix

Impact

jspdf is a transitive property of opensearch-dashboards plugins. Attempting to upgrade to the fixed version (4.0.0) causes build failures. Upstream maintainers will need to update the jspdf and/or intermediate dependency versions.

Status

Fixed

Fixed version

2.19.4-r4

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-2g8w-5hf3-wqcj

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company