Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "SEMVER",
        "events": [
          {
            "introduced": "8.0.0"
          },
          {
            "fixed": "8.19.21"
          },
          {
            "introduced": "9.0.0"
          },
          {
            "fixed": "9.4.6"
          },
          {
            "introduced": "9.5.0"
          },
          {
            "fixed": "9.5.3"
          }
        ]
      }
    ],
    "package": {
      "name": "elasticsearch",
      "purl": "pkg:bitnami/elasticsearch",
      "ecosystem": "Bitnami"
    },
    "severity": [
      {
        "type": "CVSS_V3",
        "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
      }
    ],
    "database_specific": {
      "source": "https://github.com/bitnami/vulndb/tree/main/data/elasticsearch/BIT-elasticsearch-2026-82294.json"
    }
  }
]