StackRadar

CVE-2023-31418

High

Advisory

Published 26 Oct 2023In the index since 5 Sept 2026
Severity
High
worst across findings
CVSS
7.5
base score, highest
EPSS
0.012
67th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
43
of 17,781 indexed, latest versions
Container images
42
deployed by those charts
Fix available
1 of 1
affected package

Elasticsearch vulnerable to Uncontrolled Resource Consumption

Carried by container images the latest versions of 43 of 17,781 indexed charts deploy, on 42 images.

Affected packageAffected versionsFixed inImages
elasticsearchmaven1.13.2.0, 2.4.3, 2.4.4, 2.4.6+27 more7.17.13, 8.9.042
OSV records
GHSA-2cqf-6xv9-f22w
Also known as
BIT-elasticsearch-2023-31418

Charts affected

43 by stars
ChartLatestAffected imagesRadar Score
sonarqubesonarqubeVerified publisher10.0.0+5211 of 3See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/sonarqube:10.0.0-communityef9723cf4fe4
elasticsearch@8.6.1
8.9.0

Open the chart page →

6,556
sonarqube-ltssonarqubeVerified publisher1.0.16+981 of 4See more

sonarqube-lts sonarqube 1.0.16+98

1 of the 4 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/sonarqube:8.9.2-community88cd63154d4b
elasticsearch@7.12.1
7.17.13

Open the chart page →

4,099
sonarqube-dcesonarqubeVerified publisher0.1.2+1212 of 5See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
elasticsearch@7.14.1
7.17.13
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
elasticsearch@7.14.1
7.17.13

Open the chart page →

8,698
skywalkingkubesphere-testVerified publisher3.1.01 of 4See more

skywalking kubesphere-test 3.1.0

1 of the 4 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
apache/skywalking-oap-server:8.1.0-es7641237e0299b
elasticsearch@7.0.0
7.17.13

Open the chart page →

18,042
oesopsmxVerified publisher4.0.322 of 25See more

oes opsmx 4.0.32

2 of the 25 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
elasticsearch@6.8.23
7.17.13
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
elasticsearch@6.8.23
7.17.13

Open the chart page →

107,811
apache-rangerapache-ranger0.1.01 of 2See more

apache-ranger apache-ranger 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
apache/ranger:2.7.076c176e8a0e4
elasticsearch@7.10.2
7.17.13

Open the chart page →

7,740
soarv113assist-iot-cybersecurity-monitoring-soar0.1.31 of 5See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
elasticsearch@7.11.1
7.17.13

Open the chart page →

17,896
siemassist-iot-cybersecurity-monitroting-siem0.1.01 of 3See more

siem assist-iot-cybersecurity-monitroting-siem 0.1.0

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
elasticsearch@1.13.2.0
7.17.13

Open the chart page →

10,730
data-fairdata354-helmVerified publisher1.1.21 of 12See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
elasticsearch@7.17.1
7.17.13

Open the chart page →

38,346
zammaddevplayer0Verified publisher4.0.51 of 4See more

zammad devplayer0 4.0.5

1 of the 4 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
elasticsearch@7.10.1
7.17.13

Open the chart page →

6,110
elasticsearch-dataempathyco0.2.01 of 2See more

elasticsearch-data empathyco 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
elasticsearch@6.6.2
7.17.13

Open the chart page →

3,703
elasticsearch-masterempathyco0.3.01 of 2See more

elasticsearch-master empathyco 0.3.0

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
elasticsearch@6.6.2
7.17.13

Open the chart page →

3,703
elasticinseefrlab2.2.01 of 2See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
elasticsearch@7.17.3
7.17.13

Open the chart page →

17,284
portraitportraitVerified publisher0.2.131 of 8See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.0332c6d416808
elasticsearch@7.17.0
7.17.13

Open the chart page →

31,844
elasticsearchromanow-helm-chartsVerified publisher1.7.11 of 2See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.8fdc73b3249c1
elasticsearch@7.17.8
7.17.13

Open the chart page →

6,045
graylogt3n1.0.01 of 3See more

graylog t3n 1.0.0

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
graylog2/server:2.4.3-38ff28c66e6c1
elasticsearch@2.4.4
7.17.13

Open the chart page →

8,063
airbyte-cronairbyteVerified publisher0.40.371 of 1See more

airbyte-cron airbyte 0.40.37

1 of the 1 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
airbyte/cron:0.40.17caf4f551c546
elasticsearch@7.16.3
7.17.13

Open the chart page →

1,413
opendistro-esbeeinventor1.15.11 of 3See more

opendistro-es beeinventor 1.15.1

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
elasticsearch@1.13.2.0
7.17.13

Open the chart page →

5,806
apache-ranger-admindata-platform-stableVerified publisher0.2.01 of 2See more

apache-ranger-admin data-platform-stable 0.2.0

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
elasticsearch@7.6.0
7.17.13

Open the chart page →

8,245
elasticsearch-umbrellaempathyco0.8.121 of 3See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
elasticsearch@7.17.2
7.17.13

Open the chart page →

10,564
geonetwork-k8sgeonetwork-k8sVerified publisher4.2.81 of 5See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
elasticsearch@7.15.1
7.17.13

Open the chart page →

34,754
ibm-business-automation-insights-devibm-charts3.2.01 of 6See more

ibm-business-automation-insights-dev ibm-charts 3.2.0

1 of the 6 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
elasticsearch@6.7.1
7.17.13

Open the chart page →

39,349
ikigaiikigai-chartVerified publisher0.0.91 of 58See more

ikigai ikigai-chart 0.0.9

1 of the 58 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
dremio/dremio-oss:24.1.080ed2e3b7c43
elasticsearch@6.8.23
7.17.13

Open the chart page →

37,671
nexusjenkins-x0.1.371 of 1See more

nexus jenkins-x 0.1.37

1 of the 1 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
elasticsearch@2.4.3
7.17.13

Open the chart page →

12,856
tampkubebb5.6.01 of 2See more

tamp kubebb 5.6.0

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
kubebb/gateway-api:v5.6.04d062f20309c
elasticsearch@7.8.1
7.17.13

Open the chart page →

4,664
tapm-componentkubebb5.7.11 of 3See more

tapm-component kubebb 5.7.1

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
refar/apm-api:v5.7.1241373fa2972
elasticsearch@6.8.12
7.17.13

Open the chart page →

10,264
sonarqubekubesphereVerified publisher6.7.01 of 3See more

sonarqube kubesphere 6.7.0

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/sonarqube:8.9-communityeb2f0be32efd
elasticsearch@7.16.2
7.17.13

Open the chart page →

2,273
opendistro-eslsst-sqre1.4.11 of 3See more

opendistro-es lsst-sqre 1.4.1

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
elasticsearch@7.4.2
7.17.13

Open the chart page →

7,929
elasticsearch-chartmy-elasticsearch0.1.01 of 2See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/elasticsearch:7.17.35e6ac15bf6a5
elasticsearch@7.17.3
7.17.13

Open the chart page →

9,300
elasticsearch2ncsaVerified publisher0.2.21 of 2See more

elasticsearch2 ncsa 0.2.2

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/elasticsearch:2.4.641ed3a1a16b6
elasticsearch@2.4.6
7.17.13

Open the chart page →

4,911
smsf-configurationopenshift1.0.41 of 1See more

smsf-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
gurolakman/smsf-configuration:1.0.49abb3882bcbd
elasticsearch@7.15.2
7.17.13

Open the chart page →

13,607
smsf-dispatcheropenshift1.0.41 of 1See more

smsf-dispatcher openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
elasticsearch@7.15.2
7.17.13

Open the chart page →

11,738
smsf-momtopenshift1.0.41 of 1See more

smsf-momt openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
gurolakman/smsf-momt:1.0.4ce23b20a8a17
elasticsearch@7.15.2
7.17.13

Open the chart page →

13,568
smsf-registrationopenshift1.0.41 of 1See more

smsf-registration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
gurolakman/smsf-registration:1.0.4b22e746edd5d
elasticsearch@7.15.2
7.17.13

Open the chart page →

13,551
ussigw-configurationopenshift1.0.41 of 1See more

ussigw-configuration openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
elasticsearch@7.15.2
7.17.13

Open the chart page →

13,455
ussigw-coreopenshift1.0.41 of 1See more

ussigw-core openshift 1.0.4

1 of the 1 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
gurolakman/ussigw-core:1.0.48739565c3ea2
elasticsearch@7.15.2
7.17.13

Open the chart page →

13,100
reportportalreportportal5.7.21 of 8See more

reportportal reportportal 5.7.2

1 of the 8 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
reportportal/service-jobs:5.7.2dc166c58485a
elasticsearch@7.9.3
7.17.13

Open the chart page →

25,737
sonatype-nexus3simcube1.0.11 of 2See more

sonatype-nexus3 simcube 1.0.1

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
sonatype/nexus3:3.58.1586060431b64
elasticsearch@2.4.3
7.17.13

Open the chart page →

4,946
sonarqubestakaterVerified publisher0.10.31 of 2See more

sonarqube stakater 0.10.3

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/sonarqube:6.7.6-community0ae5169e3d0f
elasticsearch@5.6.3
7.17.13

Open the chart page →

11,841
trinostatcan1.23.41 of 2See more

trino statcan 1.23.4

1 of the 2 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
trinodb/trino:405ee80ab5eeab2
elasticsearch@6.8.23
7.17.13

Open the chart page →

13,767
netforge-besvtechVerified publisher0.0.21 of 3See more

netforge-be svtech 0.0.2

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
conductoross/conductor:3.31.09fba127693e6
elasticsearch@7.17.11
7.17.13

Open the chart page →

4,674
sonarqubewebencryptor6.7.31 of 3See more

sonarqube webencryptor 6.7.3

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
library/sonarqube:8.2-communitya246bc64207e
elasticsearch@6.8.4
7.17.13

Open the chart page →

5,460
opendistro-eswitcom-gmbh1.13.31 of 3See more

opendistro-es witcom-gmbh 1.13.3

1 of the 3 container images this version deploys carry CVE-2023-31418.

Container imageDigestPackageFixed in
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
elasticsearch@1.13.2.0
7.17.13

Open the chart page →

5,806

Container images carrying it

42 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
amazon/opendistro-for-elasticsearch:1.13.32acfa1dcc5f8
elasticsearch@1.13.2.0
7.17.13
2
empathyco/elasticsearch:6.6.2-memlockbcf4365ee7ec
elasticsearch@6.6.2
7.17.13
2
library/elasticsearch:7.17.35e6ac15bf6a5
elasticsearch@7.17.3
7.17.13
2
airbyte/cron:0.40.17caf4f551c546
elasticsearch@7.16.3
7.17.13
1
amazon/opendistro-for-elasticsearch:1.4.06df71eb04639
elasticsearch@7.4.2
7.17.13
1
apache/ranger:2.7.076c176e8a0e4
elasticsearch@7.10.2
7.17.13
1
apache/skywalking-oap-server:8.1.0-es7641237e0299b
elasticsearch@7.0.0
7.17.13
1
assistiot/cybersecurity-monitoring_id-elk:latestba1d85ec3739
elasticsearch@1.13.2.0
7.17.13
1
assistiot/cybersecurity-monitoring_ir-elk:latest4228b7a8ef40
elasticsearch@7.11.1
7.17.13
1
conductoross/conductor:3.31.09fba127693e6
elasticsearch@7.17.11
7.17.13
1
dremio/dremio-oss:24.1.080ed2e3b7c43
elasticsearch@6.8.23
7.17.13
1
egdsandaru/apache-ranger-admin:1.0.0681baa1926f4
elasticsearch@7.6.0
7.17.13
1
empathyco/elasticsearch:7.17.2-memlock03e724e41eeb
elasticsearch@7.17.2
7.17.13
1
geonetwork/gn-cloud-ogc-api-records-service:4.2.8-020c9bb761f67
elasticsearch@7.15.1
7.17.13
1
graylog2/server:2.4.3-38ff28c66e6c1
elasticsearch@2.4.4
7.17.13
1
gurolakman/smsf-configuration:1.0.49abb3882bcbd
elasticsearch@7.15.2
7.17.13
1
gurolakman/smsf-dispatcher:1.0.46537e8ed8de8
elasticsearch@7.15.2
7.17.13
1
gurolakman/smsf-momt:1.0.4ce23b20a8a17
elasticsearch@7.15.2
7.17.13
1
gurolakman/smsf-registration:1.0.4b22e746edd5d
elasticsearch@7.15.2
7.17.13
1
gurolakman/ussigw-configuration:1.0.4bf18525c5ad9
elasticsearch@7.15.2
7.17.13
1
gurolakman/ussigw-core:1.0.48739565c3ea2
elasticsearch@7.15.2
7.17.13
1
ibmcom/bai-elasticsearch-dev:19.0.25441dba2fa00
elasticsearch@6.7.1
7.17.13
1
kubebb/gateway-api:v5.6.04d062f20309c
elasticsearch@7.8.1
7.17.13
1
library/elasticsearch:7.17.0332c6d416808
elasticsearch@7.17.0
7.17.13
1
library/elasticsearch:2.4.641ed3a1a16b6
elasticsearch@2.4.6
7.17.13
1
library/elasticsearch:7.17.8fdc73b3249c1
elasticsearch@7.17.8
7.17.13
1
library/sonarqube:6.7.6-community0ae5169e3d0f
elasticsearch@5.6.3
7.17.13
1
library/sonarqube:9.1.0-datacenter-search7e43ff493a47
elasticsearch@7.14.1
7.17.13
1
library/sonarqube:8.9.2-community88cd63154d4b
elasticsearch@7.12.1
7.17.13
1
library/sonarqube:8.2-communitya246bc64207e
elasticsearch@6.8.4
7.17.13
1
library/sonarqube:9.1.0-datacenter-appa9bc5a3a1fc3
elasticsearch@7.14.1
7.17.13
1
library/sonarqube:8.9-communityeb2f0be32efd
elasticsearch@7.16.2
7.17.13
1
library/sonarqube:10.0.0-communityef9723cf4fe4
elasticsearch@8.6.1
8.9.0
1
refar/apm-api:v5.7.1241373fa2972
elasticsearch@6.8.12
7.17.13
1
reportportal/service-jobs:5.7.2dc166c58485a
elasticsearch@7.9.3
7.17.13
1
sonatype/nexus3:3.58.1586060431b64
elasticsearch@2.4.3
7.17.13
1
trinodb/trino:405ee80ab5eeab2
elasticsearch@6.8.23
7.17.13
1
zammad/zammad-docker-compose:zammad-elasticsearch-4.1.0-318274d75a51fc
elasticsearch@7.10.1
7.17.13
1
ghcr.io/data-fair/elasticsearch:7.17.1aa45adaf59a7
elasticsearch@7.17.1
7.17.13
1
ghcr.io/jenkins-x/nexus:0.1.378caf5289fe73
elasticsearch@2.4.3
7.17.13
1
quay.io/opsmxpublic/ubi8-oes-autopilot:isd-spin-2025.10.01-af26a30d4-20251126105458bd0bcf72f9
elasticsearch@6.8.23
7.17.13
1
quay.io/opsmxpublic/ubi8-oes-platform:isd-spin-2025.10.01-a7c191ec-2025112611228ed603ab7417
elasticsearch@6.8.23
7.17.13
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.