https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T09:42:36.762680+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bit-elasticsearch-2021-22132 BIT-elasticsearch-2021-22132 2026-10-04T09:42:36.862506+00:00

Affected: Bitnami: elasticsearch

Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store the HTTP headers. An Elasticsearch user with the ability to read the .tasks index could obtain sensitive request headers of other users in the cluster. This issue is fixed in Elasticsearch 7.10.2

 https://cve.radiocsirt.org/vuln/cnvd-2021-03548 cnvd-2021-03548 2026-10-04T09:42:36.862566+00:00 cnvd-2021-03548 https://cve.radiocsirt.org/vuln/euvd-2026-22662 EUVD-2026-22662 2026-10-04T09:42:36.862583+00:00 EUVD-2026-22662 https://cve.radiocsirt.org/vuln/fkie_cve-2021-22132 fkie_cve-2021-22132 2026-10-04T09:42:36.862595+00:00

Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store the HTTP headers. An Elasticsearch user with the ability to read the .tasks index could obtain sensitive request headers of other users in the cluster. This issue is fixed in Elasticsearch 7.10.2

 https://cve.radiocsirt.org/vuln/ghsa-5fvx-2jj3-6mff GHSA-5fvx-2jj3-6mff — Insufficiently Protected Credentials in Elasticsearch 2026-10-04T09:42:36.862617+00:00

Affected: Maven: org.elasticsearch:elasticsearch

Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store the HTTP headers. An Elasticsearch user with the ability to read the .tasks index could obtain sensitive request headers of other users in the cluster. This issue is fixed in Elasticsearch 7.10.2

 https://cve.radiocsirt.org/vuln/gsd-2021-22132 gsd-2021-22132 2026-10-04T09:42:36.862638+00:00 gsd-2021-22132 https://cve.radiocsirt.org/vuln/rhsa-2022:5606 RHSA-2022:5606 — Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus 2.7 security update 2026-10-04T09:42:36.862649+00:00

hadoop: WebHDFS client might send SPNEGO authorization header lz4: memory corruption due to an integer overflow bug caused by memmove argument elasticsearch: executing async search improperly stores HTTP headers leading to information disclosure elasticsearch: Document disclosure flaw in the Elasticsearch suggester elasticsearch: Document disclosure flaw when Document or Field Level Security is used jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck Kafka: Timing Attack Vulnerability for Apache Kafka Connect and Clients xstream: Injecting highly recursive collections or maps can cause a DoS quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-22132 UBUNTU-CVE-2021-22132 2026-10-04T09:42:36.862678+00:00

Affected: Ubuntu:16.04:LTS: elasticsearch

Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store the HTTP headers. An Elasticsearch user with the ability to read the .tasks index could obtain sensitive request headers of other users in the cluster. This issue is fixed in Elasticsearch 7.10.2