Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2024-52979 — MEDIUM severity vulnerability | Release Alert

CVE-2024-52979

6.5

MEDIUMCVSS v3

Published

May 1, 2025

Affected

11 projects

Assigned by

[email protected]

Severity scale

010

Description

Uncontrolled Resource Consumption in Elasticsearch while evaluating specifically crafted search templates with Mustache functions can lead to Denial of Service by causing the Elasticsearch node to crash.

elastic/elasticsearch

GitHubFree and Open Source, Distributed, RESTful Search Engine

< 7.17.25, >= 8.0.0, < 8.16.0NVD

elasticsearch

NPMThe official low-level Elasticsearch client for Node.js and the browser.

< 7.17.25, >= 8.0.0, < 8.16.0NVD

ElasticSearch

More on this CVE

NVD↗GitHub Advisory↗

NuGet Gallery

Elasticsearch is a flexible and powerful open source, distributed, real-time search and analytics engine.

< 7.17.25, >= 8.0.0, < 8.16.0NVD

Elasticsearch

Chocolatey## The heart of the free and open Elastic Stack Elasticsearch is a distributed, RESTful search and analytics engine capable of addressing a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data for lightning fast search, fine‑tuned relevancy, and powerful analytics that scale with ease. **Please Note**: This is an automatically updated package. If you find it is out of date by more than a day or two, please contact the maintainer(s) and let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.

< 7.17.25, >= 8.0.0, < 8.16.0NVD