{"action":"Upgrade org.elasticsearch.client:elasticsearch-rest-client to 7.13.4 or later.","affected":[{"fixed":"7.13.4","introduced":"7.10.0"}],"component":"org.elasticsearch.client:elasticsearch-rest-client","cve_ids":["CVE-2021-22145"],"ecosystem":"Maven","epss":0.76249,"exploited":false,"fixed_versions":["7.13.4"],"ghsa_id":"GHSA-q394-h7f5-7f44","id":"tcs_01M5N98GB7F1PGZE1T2B27S6FN","modified_at":"2025-07-09T15:17:37.961672Z","published_at":"2022-05-24T19:08:49Z","references":["https://osv.dev/vulnerability/GHSA-q394-h7f5-7f44","https://nvd.nist.gov/vuln/detail/CVE-2021-22145","https://discuss.elastic.co/t/elasticsearch-7-13-4-security-update/279177","https://gist.github.com/lucasdrufva/f9c5d7c9e26ee087b736d727953afd34","https://github.com/elastic/elasticsearch","https://security.netapp.com/advisory/ntap-20210827-0006","https://www.oracle.com/security-alerts/cpuapr2022.html","http://packetstormsecurity.com/files/163648/ElasticSearch-7.13.3-Memory-Disclosure.html"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-q394-h7f5-7f44","url":"https://osv.dev/vulnerability/GHSA-q394-h7f5-7f44"}],"summary":"Generation of Error Message Containing Sensitive Information in Elasticsearch"}