CGA-4jxw-mwcp-83m9

Published

Last updated

Package

elasticsearch-7

Repository

Chainguard

Latest Update

Not affected

Aliases

Severity

5.9

Medium

CVSS V3

Status

Not affected

Justification

Vulnerable code not in execute path

Impact

Elasticsearch retains an older library version for OpenSAML compatibility but does not use Guava serialization, making it unaffected by this vulnerability. For more details, see the GitHub comment https://github.com/elastic/elasticsearch/issues/50395#issuecomment-1145561826

Status

Under investigation

Status

Fixed

Fixed version

7.17.14-r2

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™