Package
elasticsearch-7-iamguarded
Component
elasticsearch
Latest update
5.7
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Impact
Elasticsearch has not done a patch or backport fix for elasticsearch-7 for this CVE and recommend upgrading to versions >=8.18.8. For users that cannot upgrade, they can set 'xpack.security.audit.logfile.events.emit_request_body' to 'false'. More information about this CVE can be found in the elasticsearch security announcement: https://discuss.elastic.co/t/elasticsearch-8-18-8-8-19-5-9-0-8-9-1-5-security-update-esa-2025-18/382453
Status
Fixed version
7.17.29-r11Status
Impact
Elasticsearch has not done a patch or backport fix for elasticsearch-7 for this CVE and recommend upgrading to versions >=8.18.8. For users that cannot upgrade, they can set 'xpack.security.audit.logfile.events.emit_request_body' to 'false'. More information about this CVE can be found in the elasticsearch security announcement: https://discuss.elastic.co/t/elasticsearch-8-18-8-8-19-5-9-0-8-9-1-5-security-update-esa-2025-18/382453
Status