Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-37734

Fixed in a distro release EPSS <1%CVSS 4.3

Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant.

Published 2025-11-12 · CVE record · OSV

Products: Elastic Kibana

Distro releases

ReleasePackageFixed in
Chainguardkibana-8.17-bitnami8.17.10-r11
Chainguardkibana-8.18-bitnami8.18.8-r10
Chainguardkibana-8.19-bitnami8.19.11-r0