Is Graylog 6.3.14 affected?

CVSS 7.5

3 known vulnerabilities affect 6.3.14 (highest CVSS 7.5).

Your branch 6.3 has reached end of life (Jun 30, 2026).

31 newer releases in its track, up to 7.2.1. What changed up to 7.2.1

Vulnerabilities affecting 6.3.14

7.5
GHSA-xwgc-q8x5-538w IPFIX input parser can be exploited to consume excessive CPU and block message processing
7.2
GHSA-w9wq-g358-3x8g Privilege escalation via user creation and user permission/role updates fixed in 7.0.13
5.3
GHSA-vpqc-v737-94g9 Palo Alto Networks input parser can be exploited to consume excessive CPU and delay message processing