floragunn vulnerabilities

CVEs per yearBy the year they were published

1. 20199
2. 20254
3. 20263

Newest CVEs

• CVE-2026-4819

  Search Guard audit logs can contain under certain conditions user credentials

  floragunn · Search Guard FLX

  Medium4.9
• CVE-2026-4818

  Some management operations on data streams are not properly restricted when user does not have the necessary privileges

  floragunn · Search Guard FLX

  Medium6.8
• CVE-2026-4799

  Open redirect vulnerability in Search Guard Kibana Plugin via manipulated requests

  floragunn · Search Guard FLX

  Medium4.3
• CVE-2025-13653

  Unauthorized access to documents in data streams with specially crafted requests

  floragunn · Search Guard FLX

  Medium4.3
• CVE-2025-12149

  Unauthorized access to documents protected by Document-Level Security (DLS), when Signals watches include a search query involving protected documents

  floragunn · Search Guard FLX

  Medium6.0
• CVE-2025-12148

  Unauthorized access to fields protected by Field Masking (FM) for fields of type IP

  floragunn · Search Guard FLX

  Medium6.0
• CVE-2025-12147

  Unauthorized access to fields protected by Field-Level Security (FLS) when those fields are members of an object

  floragunn · Search Guard FLX

  Medium6.0
• CVE-2019-13422

  Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an attacker can redirect the user to a potentially malicious site upon…

  floragunn · Search Guard Kibana Plugin

  Medium6.1
• CVE-2019-13423

  Search Guard Kibana Plugin versions before 5.6.8-7 and before 6.x.y-12 had an issue that an authenticated Kibana user could impersonate as kibanaserver user…

  floragunn · Search Guard Kibana Plugin

  High8.8
• CVE-2019-13421

  Search Guard versions before 23.1 had an issue that an administrative user is able to retrieve bcrypt password hashes of other users configured in the internal…

  floragunn · Search Guard

  Medium4.9