https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 19 Oct 2026 17:25:00 +0000 https://db.gcve.eu/vuln/bit-elasticsearch-2026-72647 <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> <p><strong>Affected:</strong> Bitnami: elasticsearch</p> <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> https://db.gcve.eu/vuln/bit-elasticsearch-2026-72647 https://db.gcve.eu/vuln/cleanstart-2026-ib65674 <p><strong>Affected:</strong> CleanStart: sonarqube</p> <p>Security vulnerability affects the sonarqube package. Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230).</p> <p><strong>Affected:</strong> CleanStart: sonarqube</p> <p>Security vulnerability affects the sonarqube package. Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230).</p> https://db.gcve.eu/vuln/cleanstart-2026-ib65674 https://db.gcve.eu/vuln/fkie_cve-2026-72647 <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> https://db.gcve.eu/vuln/fkie_cve-2026-72647 https://db.gcve.eu/vuln/ghsa-2qv5-xh6q-23wv <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> <p>Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230). An authenticated user holding only read privileges on a single index can submit one specially crafted search request whose deeply nested structure is processed without a depth limit, exhausting the thread stack and terminating the affected node.</p> https://db.gcve.eu/vuln/ghsa-2qv5-xh6q-23wv https://db.gcve.eu/vuln/msrc_cve-2026-72647 msrc_CVE-2026-72647 https://db.gcve.eu/vuln/msrc_cve-2026-72647