GHSA-qwrx-45xf-jjf7
GitHub Security Advisory
Elasticsearch vulnerable to stack overflow in the search API
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
A flaw was discovered in Elasticsearch affecting the `_search` API that allowed a specially crafted query string to cause a stack overflow and ultimately a denial of service.
Affected Packages
Maven
org.elasticsearch:elasticsearch
Affected versions:
7.0.0
(fixed in 7.17.13)
Maven
org.elasticsearch:elasticsearch
Affected versions:
8.0.0
(fixed in 8.9.1)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: November 26, 2025 6:30 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.