opensearch-ruby vulnerabilities

1 known vulnerability in opensearch-ruby from Opensearch-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  opensearch-ruby: Deserialization of Untrusted Data

  CVE-2022-31115Jun 30, 2022Opensearch-projectEPSS 1.62%

  opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. In versions prior to 2.0.1 the ruby `YAML.load` function was used instead of `YAML.safe_load`. As a result opensearch-ruby 2.0.0 and prior can lead to unsafe deserialization using Y