elasticsearch-7
Chainguard
Status
Impact
Elasticsearch has not done a patch or backport fix for elasticsearch-7 for this CVE and recommend upgrading to versions >=8.18.8. For users that cannot upgrade, they can set 'xpack.security.audit.logfile.events.emit_request_body' to 'false'. More information about this CVE can be found in the elasticsearch security announcement: https://discuss.elastic.co/t/elasticsearch-8-18-8-8-19-5-9-0-8-9-1-5-security-update-esa-2025-18/382453
Status