{"id":"elastic-security-8691d8a13a79","seq":2821,"kind":"advisory","title":"Elasticsearch 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-179)","url":"https://discuss.elastic.co/t/elasticsearch-8-19-22-9-4-7-9-5-4-security-update-esa-2026-179/390683","permalink":"https://vulnpulse.app/items/elastic-security-8691d8a13a79","summary":"Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Versions: 8.x: All versions from 8.12.0 up to and including 8.19.21 9.x: All versions from 9.0.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.3 Affected Configurations: All configurations Solutions and Mitigations: The issue is resolved in version 8.19.22, 9.4.7, 9.5.4. The versions above are the first releases that contain the fix where later releases a…","severity":null,"techs":["elasticsearch"],"cves":[],"tags":["security"],"source":{"id":"elastic-security","name":"Elastic Security Announcements"},"published_at":"2026-09-25T08:33:56.000Z","fetched_at":"2026-10-21T16:17:47.217Z"}