| Package | Affected versions | Patched versions |
|---|---|---|
| decode-uri-component | < 0.2.1 | 0.2.1 |
| kibana | ≥ 7.0.0, < 7.17.9≥ 8.0.0, < 8.6.1 | 7.17.98.6.1 |
A flaw (CVE-2022-38900) was discovered in one of Kibana’s third party dependencies, that could allow an authenticated user to perform a request that crashes the Kibana server process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free