CVE-2025-9624
HighAdvisory
Published 25 Nov 2025In the index since 8 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.3
- base score, highest
- EPSS
- 0.005
- 42nd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 11
- of 17,781 indexed, latest versions
- Container images
- 10
- deployed by those charts
- Fix available
- 1 of 1
- affected package
OpenSearch is vulnerable to DoS via complex query_string inputs
Carried by container images the latest versions of 11 of 17,781 indexed charts deploy, on 10 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| opensearch-commonmaven | 2.10.0, 2.12.0, 2.14.0, 2.15.0+4 more | 2.19.4, 3.3.0 | 10 |
- OSV records
- GHSA-mw3v-mmfw-3x2g
Charts affected
11 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| wazuhwazuh-helmVerified publisher | 0.0.8 | 1 of 4See more | 6,168 |
| kubernetes-loggingkubernetes-logging | 4.8.0 | 1 of 6See more | 10,530 |
| opensearchcaptnbpVerified publisher | 3.1.1 | 1 of 2See more | 998 |
| dbrepodbrepo | 1.13.3 | 1 of 25See more | 52,635 |
| opensearch-singlenodecaptnbpVerified publisher | 1.0.9 | 1 of 2See more | 1,073 |
| opentelemetry-demogpg-dev | 0.33.8 | 1 of 27See more | 49,025 |
| dfdeweyosdfir-infrastructureVerified publisher | 1.0.0 | 1 of 3See more | 1,190 |
| osdfir-infrastructureosdfir-infrastructureVerified publisher | 2.15.0 | 1 of 40See more | 71,208 |
| timesketchosdfir-infrastructureVerified publisher | 1.0.8 | 1 of 6See more | 1,753 |
| rada-platformrada-platform | 0.1.0 | 1 of 7See more | 21,211 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 9,381 |
Container images carrying it
10 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| opensearchproject/ | 7f6fa1efee8f | opensearch-common | 2.19.4 | 2 |
| bitnamilegacy/ | d8440eb6b290 | opensearch-common | 2.19.4 | 1 |
| opensearchproject/ | 1963b3ece46d | opensearch-common | 2.19.4 | 1 |
| opensearchproject/ | 466a49f379bb | opensearch-common | 2.19.4 | 1 |
| opensearchproject/ | 474ea3fdf25d | opensearch-common | 3.3.0 | 1 |
| opensearchproject/ | 645d3d9390ad | opensearch-common | 2.19.4 | 1 |
| opensearchproject/ | 69588c664014 | opensearch-common | 2.19.4 | 1 |
| opensearchproject/ | c8f3ebd2a934 | opensearch-common | 2.19.4 | 1 |
| trinodb/ | 38c6f24ab1a4 | opensearch-common | 2.19.4 | 1 |
| wazuh/ | a7a2076b167e | opensearch-common | 2.19.4 | 1 |