Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-52981

Fixed upstream EPSS <1%CVSS 4.9

An issue was discovered in Elasticsearch, where a large recursion using the Well-KnownText formatted string with nested GeometryCollection objects could cause a stackoverflow.

Published 2025-04-08 · CVE record · OSV

Products: Elasticsearch

Fixed upstream

EcosystemPackageFixed in
Mavenorg.elasticsearch:elasticsearch7.17.24
Mavenorg.elasticsearch:elasticsearch8.15.1

Distro releases

ReleasePackageFixed in
Ubuntu:16.04:LTSelasticsearchno fix