{"id":"elastic-security-579b94072f2a","seq":2809,"kind":"advisory","title":"Elasticsearch 9.4.7, 9.5.3, 8.19.23 Security Update (ESA-2026-192)","url":"https://discuss.elastic.co/t/elasticsearch-9-4-7-9-5-3-8-19-23-security-update-esa-2026-192/390865","permalink":"https://vulnpulse.app/items/elastic-security-579b94072f2a","summary":"Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to Denial of Service via Excessive Allocation (CAPEC-130). Elasticsearch enforces a size limit on the user-supplied metadata field for each individual template resource, but does not limit the total memory used when multiple such resources are retrieved together. A user holding the manage_index_templates cluster privilege can register multiple resources each within the individual limit. Retrieving them toget…","severity":null,"techs":["elasticsearch"],"cves":[],"tags":["security"],"source":{"id":"elastic-security","name":"Elastic Security Announcements"},"published_at":"2026-10-06T18:43:29.000Z","fetched_at":"2026-10-21T16:17:47.217Z"}