pkg:maven/org.opensearch/opensearch-security
Type
maven
Namespace
org.opensearch
Name
opensearch-security
Known advisories, vulnerabilities and fixes for org.opensearch/opensearch-security package.
Moderate
2
Type | Version | Distribution | # CVEs | # Advisory ID | Title | Severity | Published |
---|---|---|---|---|---|---|---|
Affected | >= 2.0.0, < 2.5.0 < 1.3.8 |
CVE-2023-23612
|
MAVEN:GHSA-864V-6QJ7-62QJ | Issue with whitespace in JWT roles in OpenSearch | moderate |
2023-01-24T20:47:19
(20 months ago) |
|
Fixed | = 2.5.0 = 1.3.8 |
CVE-2023-23612
|
MAVEN:GHSA-864V-6QJ7-62QJ | Issue with whitespace in JWT roles in OpenSearch | moderate |
2023-01-24T20:47:19
(20 months ago) |
|
Affected | >= 2.0.0, < 2.5.0 < 1.3.8 |
CVE-2023-23613
|
MAVEN:GHSA-V3CG-7R9H-R2G6 | Field-level security issue with .keyword fields in OpenSearch | moderate |
2023-01-24T20:54:28
(20 months ago) |
|
Fixed | = 2.5.0 = 1.3.8 |
CVE-2023-23613
|
MAVEN:GHSA-V3CG-7R9H-R2G6 | Field-level security issue with .keyword fields in OpenSearch | moderate |
2023-01-24T20:54:28
(20 months ago) |