Threats tagged 'ghsa-wj87-446p-485m'

A vulnerability in Elasticsearch's analysis-phonetic plugin allows an authenticated user with write or search permissions on an affected index to cause a denial of service. This occurs due to allocation of resources without limits or throttling (CWE-770) when processing specially crafted input values, leading to heap memory exhaustion and potential node unresponsiveness or termination.