Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

Contact© 2026 Release Alert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

© 2026 Release Alert

Privacy Policy
Terms of Service
Contact

CVE-2025-37727 — MEDIUM severity vulnerability | Release Alert

CVE-2025-37727

5.7

MEDIUMCVSS v3

Published

October 10, 2025

Affected

11 projects

Assigned by

[email protected]

Severity scale

010

Description

Insertion of sensitive information in log file in Elasticsearch can lead to loss of confidentiality under specific preconditions when auditing requests to the reindex API https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-reindex

elastic/elasticsearch

GitHubFree and Open Source, Distributed, RESTful Search Engine

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD

NPMThe official low-level Elasticsearch client for Node.js and the browser.

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD

More on this CVE

NVD↗GitHub Advisory↗

NuGet GalleryElasticsearch is a flexible and powerful open source, distributed, real-time search and analytics engine.

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD

Chocolatey## The heart of the free and open Elastic Stack Elasticsearch is a distributed, RESTful search and analytics engine capable of addressing a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data for lightning fast search, fine‑tuned relevancy, and powerful analytics that scale with ease. **Please Note**: This is an automatically updated package. If you find it is out of date by more than a day or two, please contact the maintainer(s) and let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD

Docker HubElasticsearch is a powerful open source search and analytics engine that makes data easy to explore.

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD

Python Package IndexPython client for Elasticsearch

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD

Crates.ioOfficial Elasticsearch Rust client

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD

RubyGemsRuby integrations for Elasticsearch (client, API, etc.)

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD

elasticsearch/elasticsearch

PackagistPHP Client for Elasticsearch

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD

elasticsearch/elasticsearch

Elastic Container RegistryContainer image hosted on docker.elastic.co

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD

@elastic/elasticsearch

NPMThe official Elasticsearch client for Node.js

>= 7.0.0, <= 7.17.29, >= 8.0.0, < 8.18.8, >= 8.19.0, < 8.19.5, >= 9.0.0, < 9.0.8, >= 9.1.0, < 9.1.5NVD