| CVE-2026-33466 |
Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and…
|
8.1
High
|
Apr 8, 2026 |
| CVE-2025-37730 |
Improper certificate validation in Logstash's TCP output could lead to a man-in-the-middle (MitM) attack in “client”…
|
6.5
Medium
|
May 6, 2025 |
| CVE-2023-46672 |
An issue was identified by Elastic whereby sensitive information is recorded in Logstash logs under specific…
|
8.4
High
|
Nov 15, 2023 |
| CVE-2019-7620 |
Logstash versions before 7.4.1 and 6.8.4 contain a denial of service flaw in the Logstash Beats input plugin
|
Not rated
|
Oct 30, 2019 |
| CVE-2019-7613 |
Winlogbeat versions before 5.6.16 and 6.6.2 had an insufficient logging flaw
|
Not rated
|
Mar 25, 2019 |
| CVE-2019-7612 |
A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs
|
Not rated
|
Mar 25, 2019 |
| CVE-2018-3817 |
When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently…
|
Not rated
|
Mar 30, 2018 |
| CVE-2016-10363 |
Logstash versions prior to 2.3.3, when using the Netflow Codec plugin, a remote attacker crafting malicious Netflow…
|
Not rated
|
Jun 16, 2017 |
| CVE-2016-10362 |
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file…
|
Not rated
|
Jun 16, 2017 |