{"action":"Upgrade github.com/elastic/beats/v7 to 7.0.0-alpha2.0.20251217054608-6e42552a23ce or later.","affected":[{"fixed":"7.0.0-alpha2.0.20251217054608-6e42552a23ce","introduced":"0"},{"fixed":"8.19.10","introduced":"8.0.0"},{"fixed":"9.1.10","introduced":"9.0.0"},{"fixed":"9.2.4","introduced":"9.2.0"}],"component":"github.com/elastic/beats/v7","cve_ids":["CVE-2026-0528"],"ecosystem":"Go","epss":0.00425,"exploited":false,"fixed_versions":["7.0.0-alpha2.0.20251217054608-6e42552a23ce","8.19.10","9.1.10","9.2.4"],"ghsa_id":"GHSA-w2gr-585j-r428","id":"tcs_01M5KFPYVBG0ZG86SRY391YJ5H","modified_at":"2026-09-10T03:50:59.278322832Z","published_at":"2026-01-13T21:31:46Z","references":["https://osv.dev/vulnerability/GHSA-w2gr-585j-r428","https://nvd.nist.gov/vuln/detail/CVE-2026-0528","https://github.com/elastic/beats/commit/0025fbfe668936eb8fa65b838508faf3c3c04387","https://github.com/elastic/beats/commit/6e42552a23cec734e7977ebd3eb7fb797ddce456","https://github.com/elastic/beats/commit/c7664c91a5a68c2df782bfeffe4fb7f42ff2ad1a","https://discuss.elastic.co/t/metricbeat-8-19-10-9-1-10-9-2-4-security-update-esa-2026-01/384519","https://github.com/elastic/beats"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-w2gr-585j-r428","url":"https://osv.dev/vulnerability/GHSA-w2gr-585j-r428"}],"summary":"Metricbeat affected by multiple denial of service vulnerabilities"}