Package
logstash-fips-9.4-iamguarded-compat
Component
jackson-core
Latest update
Fixed version
9.4.4-r18
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Fixed version
9.4.4-r18Status
Previous location
/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-filter-elastic_integration-9.4.2-java/vendor/jar-dependencies/co/elastic/logstash-filter-elastic_integration/9.4.2/logstash-filter-elastic_integration-9.4.2.jarNew location
/opt/iamguarded/logstash/vendor/bundle/jruby/3.4.0/gems/logstash-filter-elastic_integration-9.4.3-java/vendor/jar-dependencies/co/elastic/logstash-filter-elastic_integration/9.4.3/logstash-filter-elastic_integration-9.4.3.jarImpact
version-only path change detected during APK rebuild
Status
Impact
This vulnerability exists in jackson-core 2.15.0 which is bundled/shaded inside logstash-filter-elastic_integration-9.4.3.jar. As a pre-built binary artifact, the embedded dependencies cannot be updated independently. This requires a new upstream release of logstash-filter-elastic_integration with updated bundled dependencies. 9.4.3 (released 2026-05-15) is the latest available on RubyGems and still bundles jackson-core 2.15.0 shaded from Elasticsearch ingest libraries.
Status