Elasticsearch 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-184)
Uncontrolled Resource Consumption in Elasticsearch Leading to denial of service Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead denial of service via Excessive Allocation (CAPEC-130) Affected Versions: 8.x: All versions from 8.0.0 up to and including 8.19.21 9.x: All versions from 9.0.0 up to and including 9.4.6 All versions from 9.5.0 up to and including 9.5.2 Affected Configurations: All configurations Solutions and Mitigations: The issue is resolved in version 8.19.22, 9.4.7, 9.5.3. The versions above are the first releases that contain the fix where later releases al…
Read on Elastic Security Announcements
| Source | Elastic Security Announcements |
|---|---|
| Fetched | 10/22/2026, 01:17 AM |
| Data | Markdown JSON |
On 09/25/2026, 05:35 PM, Elastic Security Announcements published "Elasticsearch 8.19.22, 9.4.7, 9.5.3 Security Update (ESA-2026-184)" (type: Advisory). Related technologies: Elasticsearch / OpenSearch.