opensearch-2
Chainguard
Status
Impact
A fix exists in the 3.0 branch for this CVE as can be seen here: https://github.com/opensearch-project/OpenSearch/commit/dc4efa821904cc2d7ea7ef61c0f577d3fc0d8be9. A backport of this fix has been attempted upstream but failed: https://github.com/opensearch-project/OpenSearch/pull/18152#issuecomment-2840499533 This will require upstream maintainers to correctly implement.