OpenSearch security vulnerabilities
Open-source infrastructure. Public CVE monitoring for OpenSearch. Vendor security advisories are linked on this page.
Built for Operators of this product.
10 public records · 0 security-fix timeline events. 0 published in the last 7 days. 6 store a version range.
What you can do here
Current vulnerabilities
KEV-first priority plus newest publications for this stack.
Verified security fixes
Timeline events and, for Odoo, Community Git patch evidence — not keyword-only guesses.
Monitoring
Watch this technology from your account when you want alerts on new matches.
Patch intelligence
Use version checkers and advisory links to confirm upgrades before you change production.
- Critical 0
- High 0
- Medium 1
- Low 0
2026-08-041 issues2026-11-01
Known exploited
View all known exploitedNo records match this view.
Recently published
Browse catalog- Medium6.5DoS in zstd decompressionOpen the advisoryOct 22, 2026
- High8.3A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.Check if you run itEPSS 0.73%Nov 25, 2025
- Medium4.9Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: OpenSearch Dashboards).Check if you run itEPSS 0.37%Oct 21, 2025
- High7.4OpenSearch Data Prepper as an open source data collector for observability data.Check if you run itEPSS 0.19%Oct 15, 2025
- Medium6.5OpenSearch StackOverflow vulnerabilityCheck this weekEPSS 61.07%Nov 30, 2023
- Medium5.7Incorrect Error Handling Allowed Partial File Reads Over REST APICheck if you run itEPSS 0.60%Nov 15, 2022