Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2026-56149 — MEDIUM severity vulnerability | Release Alert

CVE-2026-56149

4.9

MEDIUMCVSS v3

Published

July 1, 2026

Affected

9 projects

Assigned by

[email protected]

Severity scale

010

Description

Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130). A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory consumption, which may render the affected node unavailable.

ElasticSearch

NuGet GalleryElasticsearch is a flexible and powerful open source, distributed, real-time search and analytics engine.

>= 8.0.0, < 8.19.17, >= 9.0.0, < 9.3.6, >= 9.4.0, < 9.4.3NVD

Elasticsearch

Chocolatey## The heart of the free and open Elastic Stack Elasticsearch is a distributed, RESTful search and analytics engine capable of addressing a growing number of use cases. As the heart of the Elastic Stack, it centrally stores your data for lightning fast search, fine‑tuned relevancy, and powerful analytics that scale with ease. **Please Note**: This is an automatically updated package. If you find it is out of date by more than a day or two, please contact the maintainer(s) and let them know [here](https://github.com/mkevenaar/chocolatey-packages/issues) that the package is no longer updating correctly.

>= 8.0.0, < 8.19.17, >= 9.0.0, < 9.3.6, >= 9.4.0, < 9.4.3NVD