Skip to main content
← Go

github.com/elastic/beats/v7

6 known vulnerabilities (6 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 6 medium
Registry
pkg.go.dev

Advisories 6

  • CVE-2026-26933Medium 5.7

    Improper Validation of Array Index in Packetbeat Leading to Denial of Service

    Affected: fixed in 7.0.0-alpha2.0.20260126223743-dec1b31111ec.

  • CVE-2026-26931Medium 5.7

    Memory Allocation with Excessive Size Value in Metricbeat Leading to Denial of Service

    Affected: fixed in 7.0.0-alpha2.0.20260112100137-de072c4e371e.

  • CVE-2026-0528Medium 6.5

    Improper Input Validation in Metricbeat Leading to Denial of Service

    Affected: fixed in 7.0.0-alpha2.0.20251217054608-6e42552a23ce; from 8.0.0, fixed in 8.19.10; from 9.0.0, fixed in 9.1.10; from 9.2.0, fixed in 9.2.4.

  • CVE-2025-68383Medium 6.5

    Filebeat Improper Validation of Specified Index, Position, or Offset in Input

    Affected: from 7.7.0, fixed in 8.19.9; from 9.0.0, fixed in 9.1.9; from 9.2.0, fixed in 9.2.3; fixed in 7.0.0-alpha2.0.20251204214633-dd3af18220bf; fixed in 7.0.0-alpha2.0.20251204214633-dd3af18220bf; from 7.7.0.

  • CVE-2025-68388Medium 5.3

    Allocation of resources without limits or throttling (CWE-770) allows an unauthenticated remote attacker to cause excessive allocation…

    Affected: fixed in 7.0.0-alpha2.0.20251209162832-28cfc80d2f4e.

  • CVE-2023-49922Medium 6.8

    Beats Insertion of Sensitive Information into Log File

    Affected: from 7.0.0, fixed in 7.17.16; fixed in 7.17.16.