opensearch-project security vulnerabilities

7 published CVEs name opensearch-project security among the affected products.

Critical 0High 1Medium 6Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2023-45807
OpenSearch Issue with tenant read-only permissions
opensearch-project · security
Medium5.4
CVE-2023-31141
OpenSearch issue with fine-grained access control during extremely rare race conditions
opensearch-project · security
Medium4.8
CVE-2023-25806
Time discrepancy in authentication responses in OpenSearch
opensearch-project · security
Medium5.3
CVE-2023-23612
Issue with whitespace in JWT roles in OpenSearch
opensearch-project · security
Medium4.7
CVE-2023-23613
Field-level security issue with .keyword fields in OpenSearch
opensearch-project · security
Medium5.7
CVE-2022-41918
Issue with fine-grained access control of indices backing data streams
opensearch-project · security
Medium6.3
CVE-2022-35980
OpenSearch vulnerable to Improper Authorization of Index Containing Sensitive Information
opensearch-project · security
High7.5