https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T17:24:48.919494+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-106475 fkie_cve-2026-106475 2026-11-14T17:24:48.927438+00:00

The Elasticsearch data source resource proxy forwards the request method and path to Elasticsearch using the data source's own credentials, without restricting them to the operations the plugin needs. A user who can query the data source can alter index mappings or reach other indices on the cluster. [Improper authorization / path validation]

 https://db.gcve.eu/vuln/ghsa-pcjw-cwc9-7g9x GHSA-pcjw-cwc9-7g9x 2026-11-14T17:24:48.927525+00:00

The Elasticsearch data source resource proxy forwards the request method and path to Elasticsearch using the data source's own credentials, without restricting them to the operations the plugin needs. A user who can query the data source can alter index mappings or reach other indices on the cluster. [Improper authorization / path validation]

 https://db.gcve.eu/vuln/msrc_cve-2026-106475 msrc_CVE-2026-106475 — Elasticsearch data source resource proxy allows arbitrary methods and paths with the data source's credentials 2026-11-14T17:24:48.927547+00:00 msrc_CVE-2026-106475 https://db.gcve.eu/vuln/rhsa-2026:95953 RHSA-2026:95953 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-11-14T17:24:48.927567+00:00

grafana: Math expressions could crash Grafana grafana: Azure Monitor data source could leak its Azure access token grafana: Grafana: Information disclosure via legacy schema switch in contact points grafana: ELASTICSEARCH DATA SOURCE COULD BE USED TO SEND ARBITRARY REQUESTS TO ELASTICSEARCH joi: joi: Denial of Service via inefficient regular expression in email validation