Threats tagged 'cleanstart-2026-ci98008'

A security vulnerability in the elasticsearch package involves a CBOR-parsing issue in the jackson-dataformats-binary CBOR module. Specifically, an unbounded run of CBOR tags causes quadratic-time growth in the TagList, leading to CPU and garbage collection exhaustion, resulting in a denial-of-service condition. This vulnerability is confirmed with proof-of-concept. It affects versions prior to 9.2.8-r13 and has a high severity rating with a CVSS score of 7.5. A patch is available in version 9.2.8-r13.