Skip to content

Product

opensearch-project opensearch-ruby vulnerabilities

1 published CVE affecting opensearch-project opensearch-ruby, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest opensearch-project opensearch-ruby CVEs

Newest publication first

  1. CVE-2022-31115 Unsafe YAML deserialization in opensearch-ruby

    Published
    HighCVSS 8.8 EPSS 1.6% PoC

    opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. In versions prior to 2.0.1 the ruby YAML.load function was used instead of YAML.safe_load. As a result opensearch-ruby 2.0.0 and prior can lead to unsafe deserialization using YAML.load if the response...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.