| Package | Affected versions | Patched versions |
|---|---|---|
| elasticsearch | ≥ 9.2.0, < 9.4.8≥ 9.5.0, < 9.5.5 | 9.4.89.5.5 |
Uncontrolled Recursion (CWE-674) in Elasticsearch can allow an authenticated user with low privileges to terminate an Elasticsearch node, resulting in denial of service, via Excessive Allocation (CAPEC-130).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free