/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-7849-p977-qgwr

Published

Last updated

https://images.chainguard.dev/security/CGA-7849-p977-qgwr
Package

elasticsearch-7

Repository

Chainguard

Latest Update
Fix not planned
Aliases
  • CVE-2025-37727
  • GHSA-56r7-h6mw-rcfv

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2025-37727

Updates

Status

Fix not planned

Impact

Elasticsearch has not done a patch or backport fix for elasticsearch-7 for this CVE and recommend upgrading to versions >=8.18.8. For users that cannot upgrade, they can set 'xpack.security.audit.logfile.events.emit_request_body' to 'false'. More information about this CVE can be found in the elasticsearch security announcement: https://discuss.elastic.co/t/elasticsearch-8-18-8-8-19-5-9-0-8-9-1-5-security-update-esa-2025-18/382453

Status

Under investigation


Safe Source for Open Source™
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing