CVE-2025-68384

Medium

Advisory

Published 19 Dec 2025In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 6.5; base score, highest
EPSS: 0.003; 25th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 20; of 17,781 indexed, latest versions
Container images: 18; deployed by those charts
Fix available: 3 of 3; affected packages

Elasticsearch Allocation of Resources Without Limits or Throttling

Carried by container images the latest versions of 20 of 17,781 indexed charts deploy, on 18 images.

Affected package	Affected versions	Fixed in	Images
x-pack-securitymaven	6.6.2, 7.11.1, 7.14.1, 7.17.0+13 more	8.19.9, 9.1.9	18
elasticsearchbitnami	8.12.1-0, 8.12.2-0, 9.0.1-0, 9.1.2-0	8.19.9	4
Elasticsearchbitnami	8.12.1-0, 8.12.2-0	8.19.9	2

OSV records: BIT-elasticsearch-2025-68384 GHSA-qf7c-7r9h-mm92

Charts affected

20 by stars

Chart

Latest

Affected images

Radar Score

sonarqubesonarqube

10.0.0+521

1 of 3 See more

sonarqube sonarqube 10.0.0+521

1 of the 3 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
library/sonarqube :10.0.0-community	ef9723cf4fe4	x-pack-security@8.6.1	8.19.9

Open the chart page →

6,556

thehivestrangebee-helm

1.0.6

1 of 7 See more

thehive strangebee-helm 1.0.6

1 of the 7 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	elasticsearch@9.1.2-0 x-pack-security@9.1.2	8.19.9 9.1.9

Open the chart page →

16,210

seafiledatamate

0.6.0

1 of 6 See more

seafile datamate 0.6.0

1 of the 6 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	elasticsearch@8.12.1-0 Elasticsearch@8.12.1-0 x-pack-security@8.12.1	8.19.9 8.19.9 8.19.9

Open the chart page →

27,267

sonarqube-dcesonarqube

0.1.2+121

2 of 5 See more

sonarqube-dce sonarqube 0.1.2+121

2 of the 5 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
library/sonarqube :9.1.0-datacenter-search	7e43ff493a47	x-pack-security@7.14.1	8.19.9
library/sonarqube :9.1.0-datacenter-app	a9bc5a3a1fc3	x-pack-security@7.14.1	8.19.9

Open the chart page →

8,698

repoflowrepoflow-helm-public

0.9.1

1 of 8 See more

repoflow repoflow-helm-public 0.9.1

1 of the 8 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.15.0	310b9fc03b06	x-pack-security@8.15.0	8.19.9

Open the chart page →

13,521

soarv113assist-iot-cybersecurity-monitoring-soar

0.1.3

1 of 5 See more

soarv113 assist-iot-cybersecurity-monitoring-soar 0.1.3

1 of the 5 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
assistiot/cybersecurity-monitoring_ir-elk :latest	4228b7a8ef40	x-pack-security@7.11.1	8.19.9

Open the chart page →

17,896

data-fairdata354-helm

1.1.2

1 of 12 See more

data-fair data354-helm 1.1.2

1 of the 12 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	x-pack-security@7.17.1	8.19.9

Open the chart page →

38,346

elasticsearch-dataempathyco

0.2.0

1 of 2 See more

elasticsearch-data empathyco 0.2.0

1 of the 2 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
empathyco/elasticsearch :6.6.2-memlock	bcf4365ee7ec	x-pack-security@6.6.2	8.19.9

Open the chart page →

3,703

elasticsearch-masterempathyco

0.3.0

1 of 2 See more

elasticsearch-master empathyco 0.3.0

1 of the 2 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
empathyco/elasticsearch :6.6.2-memlock	bcf4365ee7ec	x-pack-security@6.6.2	8.19.9

Open the chart page →

3,703

elasticinseefrlab

2.2.0

1 of 2 See more

elastic inseefrlab 2.2.0

1 of the 2 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.3	5e6ac15bf6a5	x-pack-security@7.17.3	8.19.9

Open the chart page →

17,284

clowder2ncsa

1.9.7

1 of 12 See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	elasticsearch@8.12.2-0 Elasticsearch@8.12.2-0 x-pack-security@8.12.2	8.19.9 8.19.9 8.19.9

Open the chart page →

37,373

portraitportrait

0.2.13

1 of 8 See more

portrait portrait 0.2.13

1 of the 8 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.0	332c6d416808	x-pack-security@7.17.0	8.19.9

Open the chart page →

31,844

elasticsearchromanow-helm-charts

1.7.1

1 of 2 See more

elasticsearch romanow-helm-charts 1.7.1

1 of the 2 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.8	fdc73b3249c1	x-pack-security@7.17.8	8.19.9

Open the chart page →

6,045

arlas-aiasarlas-stack

28.8.0

1 of 22 See more

arlas-aias arlas-stack 28.8.0

1 of the 22 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	elasticsearch@9.0.1-0 x-pack-security@9.0.1	8.19.9 9.1.9

Open the chart page →

40,238

elasticsearch-umbrellaempathyco

0.8.12

1 of 3 See more

elasticsearch-umbrella empathyco 0.8.12

1 of the 3 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
empathyco/elasticsearch :7.17.2-memlock	03e724e41eeb	x-pack-security@7.17.2	8.19.9

Open the chart page →

10,564

geonetwork-k8sgeonetwork-k8s

4.2.8

1 of 5 See more

geonetwork-k8s geonetwork-k8s 4.2.8

1 of the 5 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.15	88c2ec10c7f2	x-pack-security@7.17.15	8.19.9

Open the chart page →

34,754

daveit-at-m

0.2.15

1 of 11 See more

dave it-at-m 0.2.15

1 of the 11 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	elasticsearch@9.1.2-0 x-pack-security@9.1.2	8.19.9 9.1.9

Open the chart page →

15,089

elasticmicroboxlabs

0.3.0

1 of 1 See more

elastic microboxlabs 0.3.0

1 of the 1 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
library/elasticsearch :8.17.3	2cc40b15dff8	x-pack-security@8.17.3	8.19.9

Open the chart page →

4,257

elasticsearch-chartmy-elasticsearch

0.1.0

1 of 2 See more

elasticsearch-chart my-elasticsearch 0.1.0

1 of the 2 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
library/elasticsearch :7.17.3	5e6ac15bf6a5	x-pack-security@7.17.3	8.19.9

Open the chart page →

9,300

sonarquberedhat-cop

0.1.13

1 of 1 See more

sonarqube redhat-cop 0.1.13

1 of the 1 container images this version deploys carry CVE-2025-68384.

Container image	Digest	Package	Fixed in
library/sonarqube :10.7.0-community	0842dcd4c8f8	x-pack-security@8.14.1	8.19.9

Open the chart page →

4,203

Container images carrying it

18 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
bitnamilegacy/elasticsearch :9.1.2-debian-12-r0	00176a47afa0	elasticsearch@9.1.2-0 x-pack-security@9.1.2	8.19.9 9.1.9	2
empathyco/elasticsearch :6.6.2-memlock	bcf4365ee7ec	x-pack-security@6.6.2	8.19.9	2
library/elasticsearch :7.17.3	5e6ac15bf6a5	x-pack-security@7.17.3	8.19.9	2
assistiot/cybersecurity-monitoring_ir-elk :latest	4228b7a8ef40	x-pack-security@7.11.1	8.19.9	1
bitnamilegacy/elasticsearch :8.12.2	15d4647fd491	elasticsearch@8.12.2-0 Elasticsearch@8.12.2-0 x-pack-security@8.12.2	8.19.9 8.19.9 8.19.9	1
bitnamilegacy/elasticsearch :8.12.1-debian-11-r2	9cfd2df1294d	elasticsearch@8.12.1-0 Elasticsearch@8.12.1-0 x-pack-security@8.12.1	8.19.9 8.19.9 8.19.9	1
bitnamilegacy/elasticsearch :9.0.1-debian-12-r0	e6f6ddcce2f1	elasticsearch@9.0.1-0 x-pack-security@9.0.1	8.19.9 9.1.9	1
empathyco/elasticsearch :7.17.2-memlock	03e724e41eeb	x-pack-security@7.17.2	8.19.9	1
library/elasticsearch :8.17.3	2cc40b15dff8	x-pack-security@8.17.3	8.19.9	1
library/elasticsearch :8.15.0	310b9fc03b06	x-pack-security@8.15.0	8.19.9	1
library/elasticsearch :7.17.0	332c6d416808	x-pack-security@7.17.0	8.19.9	1
library/elasticsearch :7.17.15	88c2ec10c7f2	x-pack-security@7.17.15	8.19.9	1
library/elasticsearch :7.17.8	fdc73b3249c1	x-pack-security@7.17.8	8.19.9	1
library/sonarqube :10.7.0-community	0842dcd4c8f8	x-pack-security@8.14.1	8.19.9	1
library/sonarqube :9.1.0-datacenter-search	7e43ff493a47	x-pack-security@7.14.1	8.19.9	1
library/sonarqube :9.1.0-datacenter-app	a9bc5a3a1fc3	x-pack-security@7.14.1	8.19.9	1
library/sonarqube :10.0.0-community	ef9723cf4fe4	x-pack-security@8.6.1	8.19.9	1
ghcr.io/data-fair/elasticsearch :7.17.1	aa45adaf59a7	x-pack-security@7.17.1	8.19.9	1