Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2015-1427 — CRITICAL severity vulnerability | Release Alert

CVE-2015-1427

9.8

CRITICALCVSS v3

Published

February 17, 2015

CVSS v2

7.5 HIGH

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

elastic/elasticsearch

GitHubFree and Open Source, Distributed, RESTful Search Engine

= *, = 1.4.0, = 1.4.1, = 1.4.2, >= 1.4.0, < 1.4.3, < 1.3.8NVD

NPMThe official low-level Elasticsearch client for Node.js and the browser.

= *, = 1.4.0, = 1.4.1, = 1.4.2, >= 1.4.0, < 1.4.3, < 1.3.8NVD

More on this CVE

NVD↗GitHub Advisory↗

NuGet GalleryElasticsearch is a flexible and powerful open source, distributed, real-time search and analytics engine.

= *, = 1.4.0, = 1.4.1, = 1.4.2, >= 1.4.0, < 1.4.3, < 1.3.8NVD

Chocolatey## The heart of the free and open Elastic Stack Elasticsearch is a distributed, RESTful search and analytics engine capable of addressing a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data for lightning fast search, fine‑tuned relevancy, and powerful analytics that scale with ease. **Please Note**: This is an automatically updated package. If you find it is out of date by more than a day or two, please contact the maintainer(s) and let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.

= *, = 1.4.0, = 1.4.1, = 1.4.2, >= 1.4.0, < 1.4.3, < 1.3.8NVD

Python Package IndexPython client for Elasticsearch

= *, = 1.4.0, = 1.4.1, = 1.4.2, >= 1.4.0, < 1.4.3, < 1.3.8NVD

RubyGemsRuby integrations for Elasticsearch (client, API, etc.)

= *, = 1.4.0, = 1.4.1, = 1.4.2, >= 1.4.0, < 1.4.3, < 1.3.8NVD

elasticsearch/elasticsearch

PackagistPHP Client for Elasticsearch

= *, = 1.4.0, = 1.4.1, = 1.4.2, >= 1.4.0, < 1.4.3, < 1.3.8NVD