Known Vulnerabilities for X-pack by Elasticsearch
Listed below are 1 of the newest known vulnerabilities associated with "X-pack" by "Elasticsearch".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-114095 json | Dulwich before 1.2.9 contains a denial of service vulnerability in Pack.resolve_object that allows attackers to cause infinit... | Not Provided | 2026-10-21 | 2026-10-21 |
| CVE-2026-113708 json | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-r... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-110858 json | GitPython from 3.1.30 before 3.2.0 contains a remote code execution vulnerability in Remote.pull() whose unsafe-option guard ... | Not Provided | 2026-10-14 | 2026-10-16 |
| CVE-2026-110690 json | Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack e... | Not Provided | 2026-10-14 | 2026-10-14 |
| CVE-2026-109351 json | Gitoxide gix-pack before 0.75.0 contains an uncontrolled memory allocation vulnerability that allows remote attackers to abor... | Not Provided | 2026-10-12 | 2026-10-12 |
| CVE-2026-109350 json | Gitoxide gix-pack before 0.75.0 contains a denial of service vulnerability that allows malicious remotes to crash fetch opera... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-109349 json | gitoxide gix-pack before 0.75.0 contains a reachable assertion in BytesToEntriesIter::new_from_header: the pack header decode... | Not Provided | 2026-10-12 | 2026-10-13 |
| CVE-2026-108954 json | A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDe... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-108881 json | JeecgBoot through 3.9.5 contains a missing authorization vulnerability in the getTenantPackInfo handler that allows any authe... | Not Provided | 2026-10-11 | 2026-10-13 |
| CVE-2026-108662 json | JeecgBoot through 3.9.5 contains a missing authorization vulnerability that allows low-privileged authenticated users to remo... | Not Provided | 2026-10-10 | 2026-10-18 |