CGA-f36r-qrqf-qwr9

Published

Last updated

https://images.chainguard.dev/security/CGA-f36r-qrqf-qwr9

Package

elasticsearch-7

Repository

Chainguard

Latest Update

Fixed

Fixed Version

7.17.24-r0

Aliases

CVE-2024-7254
GHSA-735f-pc8j-v9w8

Severity

7.5

High

CVSS V3

References

https://nvd.nist.gov/vuln/detail/CVE-2024-7254
https://github.com/advisories/GHSA-735f-pc8j-v9w8

Updates

Status

Fixed

Fixed version

7.17.24-r0

Status

Pending upstream fix

Impact

The protobuf-java dependency is a transitive dependency that is being brought in under vector-tile which is currently at the most recent version (3.1.0). This transitive dependency must be updated by upstream maintainers.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

The trusted source for open source

Talk to an expert

Privacy

Terms

CGA-f36r-qrqf-qwr9

Severity

References

Updates

The trusted source for open source

Product

Solutions

Customers

Resources

Company