Is Logstash 8.17.9 affected?
Jul 22, 2025 · Release notes ↗
1 known vulnerability affects 8.17.9 (highest CVSS 8.1).
Your branch 8.17 has reached end of life (Aug 12, 2025).
35 newer releases in its track, up to 8.19.24. What changed up to 8.19.24
A newer release line is out: 9.5.6.
Vulnerabilities affecting 8.17.9
- 8.1 CVE-2026-33466 Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal (CAPEC-139). The… fixed in 8.19.14
Newer releases
| 8.19.24 | Nov 2, 2026 | 8.17.9 → 8.19.24 |
| 8.19.23 | Oct 6, 2026 | 8.17.9 → 8.19.23 |
| 8.19.22 | Sep 23, 2026 | 8.17.9 → 8.19.22 |
| 8.19.21 | Sep 1, 2026 | 8.17.9 → 8.19.21 |
| 8.19.20 | Aug 11, 2026 | 8.17.9 → 8.19.20 |
| 8.19.19 | Jul 21, 2026 | 8.17.9 → 8.19.19 |
| 8.19.18 | Jun 30, 2026 | 8.17.9 → 8.19.18 |
| 8.19.17 | Jun 23, 2026 | 8.17.9 → 8.19.17 |
| 8.19.16 | May 28, 2026 | 8.17.9 → 8.19.16 |
| 8.19.15 | Apr 30, 2026 | 8.17.9 → 8.19.15 |
| 8.19.14 | Apr 8, 2026 | 8.17.9 → 8.19.14 |
| 8.19.13 | Mar 19, 2026 | 8.17.9 → 8.19.13 |
| 8.19.12 | Feb 26, 2026 | 8.17.9 → 8.19.12 |
| 8.19.11 | Feb 3, 2026 | 8.17.9 → 8.19.11 |
| 8.19.10 | Jan 13, 2026 | 8.17.9 → 8.19.10 |