Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-25014
9.1
CRITICALCVSS v3
Severity scale
010
Description
A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.
GitHub
elastic/kibana
Docker HubThe Kibana docker images maintained by Elastic!
Docker HubThe Kibana docker images maintained by Elastic!>= 8.3.0, < 8.17.6, = 8.18.0, = 9.0.0NVD