Elasticsearch 8.19.8 → 8.19.15

7 releases · 0 breaking changes · 2 security fixes · 2 advisories fixed

2security0breaking0deprecated0feature0fix

Is 8.19.8 affected? · What changed up to 9.5.5

Vulnerabilities fixed by this upgrade

6.5 CVE-2026-63136 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search…
6.5 CVE-2025-68384 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial o…

Breaking changes

None in the release notes.

Security changes

security Fixes CVE-2026-63136: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search… in 8.19.15
security Fixes CVE-2025-68384: Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial o… in 8.19.9

Every release in between

8.19.15 Apr 30, 2026 Release notes ↗

securityFixes CVE-2026-63136: Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). A user with search privileges can submit a specially crafted search…

8.19.14 Apr 8, 2026 Release notes ↗

8.19.13 Mar 19, 2026 Release notes ↗

8.19.12 Feb 26, 2026 Release notes ↗

8.19.11 Feb 3, 2026 Release notes ↗

8.19.10 Jan 13, 2026 Release notes ↗

8.19.9 Dec 19, 2025 Release notes ↗

securityFixes CVE-2025-68384: Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can allow a low-privileged authenticated user to cause Excessive Allocation (CAPEC-130) causing a persistent denial o…