{"action":"Upgrade org.elasticsearch:elasticsearch to 7.17.13 (7.x) or 8.9.1 (8.x) or later.","affected":[{"fixed":"7.17.13","introduced":"7.0.0"},{"fixed":"8.9.1","introduced":"8.0.0"}],"component":"org.elasticsearch:elasticsearch","cve_ids":["CVE-2023-31419"],"ecosystem":"Maven","epss":0.61069,"exploited":false,"fixed_versions":["7.17.13","8.9.1"],"ghsa_id":"GHSA-qwrx-45xf-jjf7","id":"tcs_01M5N9AE9E6QG1KF9QMQAPEXRD","modified_at":"2024-02-22T05:34:21.779794Z","published_at":"2023-10-26T18:30:23Z","references":["https://osv.dev/vulnerability/GHSA-qwrx-45xf-jjf7","https://nvd.nist.gov/vuln/detail/CVE-2023-31419","https://discuss.elastic.co/t/elasticsearch-8-9-1-7-17-13-security-update/343297","https://security.netapp.com/advisory/ntap-20231116-0010","https://www.elastic.co/community/security"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-qwrx-45xf-jjf7","url":"https://osv.dev/vulnerability/GHSA-qwrx-45xf-jjf7"}],"summary":"Elasticsearch vulnerable to stack overflow in the search API"}