5.9
Moyenne
CVE-2026-33467 Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker…
Description
Improper Verification of Cryptographic Signature (CWE-347) in Elastic Package Registry could allow an attacker positioned to intercept network traffic, or to otherwise influence the contents served to a self-hosted registry, to substitute a tampered package without the integrity check failing closed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Elastic Package Registry 0.1 | 0.1.0 → 1.37.0 | Pas de correctif indiqué |
Références
- discuss.elastic.co discuss.elastic.co
Chronologie
- Publiée
- Dernière modification