elasticsearch-fips-8.17
Chainguard
Status
Impact
The fix for this CVE has been backported to the 8.18, 8.19 and 9.x branches as seen here: (PR https://github.com/elastic/elasticsearch/pull/135414). Upstream maintainers will need to backport changes to the 8.17 branch to remediate. Users who cannot upgrade can set xpack.security.audit.logfile.events.emit_request_body to false as per https://discuss.elastic.co/t/elasticsearch-8-18-8-8-19-5-9-0-8-9-1-5-security-update-esa-2025-18/382453.
Status