https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:17:23.953260+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-03424 bdu:2023-03424 2026-10-06T17:17:24.056780+00:00 bdu:2023-03424 https://cve.radiocsirt.org/vuln/euvd-2026-212486 EUVD-2026-212486 2026-10-06T17:17:24.056818+00:00 EUVD-2026-212486 https://cve.radiocsirt.org/vuln/fkie_cve-2023-31141 fkie_cve-2023-31141 2026-10-06T17:17:24.056832+00:00

OpenSearch is open-source software suite for search, analytics, and observability applications. Prior to versions 1.3.10 and 2.7.0, there is an issue with the implementation of fine-grained access control rules (document-level security, field-level security and field masking) where they are not correctly applied to the queries during extremely rare race conditions potentially leading to incorrect access authorization. For this issue to be triggered, two concurrent requests need to land on the same instance exactly when query cache eviction happens, once every four hours. OpenSearch 1.3.10 and 2.7.0 contain a fix for this issue.

 https://cve.radiocsirt.org/vuln/ghsa-g8xc-6mf7-h28h GHSA-g8xc-6mf7-h28h — OpenSearch issue with fine-grained access control during extremely rare race conditions 2026-10-06T17:17:24.056865+00:00

Affected: Maven: org.opensearch.plugin:opensearch-security

### Impact There is an issue with the implementation of fine-grained access control rules (document-level security, field-level security and field masking) where they are not correctly applied to the queries during extremely rare race conditions potentially leading to incorrect access authorization. For this issue to be triggered, two concurrent requests need to land on the same instance exactly when query cache eviction happens, once every four hours.

### Affected versions OpenSearch 1.0.0-1.3.9 and 2.0.0-2.6.0

### Patched versions OpenSearch 1.3.10 and 2.7.0

### For more information If you have any questions or comments about this advisory, please contact AWS/Amazon Security via our issue reporting page (https://aws.amazon.com/security/vulnerability-reporting/) or directly via email to aws-security@amazon.com. Please do not create a public GitHub issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-31141 gsd-2023-31141 2026-10-06T17:17:24.056896+00:00 gsd-2023-31141 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-31141 UBUNTU-CVE-2023-31141 2026-10-06T17:17:24.056908+00:00

Affected: Ubuntu:24.04:LTS: opensearch

OpenSearch is open-source software suite for search, analytics, and observability applications. Prior to versions 1.3.10 and 2.7.0, there is an issue with the implementation of fine-grained access control rules (document-level security, field-level security and field masking) where they are not correctly applied to the queries during extremely rare race conditions potentially leading to incorrect access authorization. For this issue to be triggered, two concurrent requests need to land on the same instance exactly when query cache eviction happens, once every four hours. OpenSearch 1.3.10 and 2.7.0 contain a fix for this issue.