Is Logstash 8.19.10 affected?
Jan 13, 2026 · Release notes ↗
1 known vulnerability affects 8.19.10 (highest CVSS 8.1).
14 newer releases in its track, up to 8.19.24. What changed up to 8.19.24
A newer release line is out: 9.5.6.
Vulnerabilities affecting 8.19.10
- 8.1 CVE-2026-33466 Improper Limitation of a Pathname to a Restricted Directory (CWE-22) in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal (CAPEC-139). The… fixed in 8.19.14
Newer releases
| 8.19.24 | Nov 2, 2026 | 8.19.10 → 8.19.24 |
| 8.19.23 | Oct 6, 2026 | 8.19.10 → 8.19.23 |
| 8.19.22 | Sep 23, 2026 | 8.19.10 → 8.19.22 |
| 8.19.21 | Sep 1, 2026 | 8.19.10 → 8.19.21 |
| 8.19.20 | Aug 11, 2026 | 8.19.10 → 8.19.20 |
| 8.19.19 | Jul 21, 2026 | 8.19.10 → 8.19.19 |
| 8.19.18 | Jun 30, 2026 | 8.19.10 → 8.19.18 |
| 8.19.17 | Jun 23, 2026 | 8.19.10 → 8.19.17 |
| 8.19.16 | May 28, 2026 | 8.19.10 → 8.19.16 |
| 8.19.15 | Apr 30, 2026 | 8.19.10 → 8.19.15 |
| 8.19.14 | Apr 8, 2026 | 8.19.10 → 8.19.14 |
| 8.19.13 | Mar 19, 2026 | 8.19.10 → 8.19.13 |
| 8.19.12 | Feb 26, 2026 | 8.19.10 → 8.19.12 |
| 8.19.11 | Feb 3, 2026 | 8.19.10 → 8.19.11 |