StackRadar

CVE-2026-102408

Medium

Advisory

Published 14 Oct 2026In the index since 15 Oct 2026
Severity
Medium
worst across findings
CVSS
4.3
base score, highest
EPSS
0.003
27th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
2
of 18,208 indexed, latest versions
Container images
1
deployed by those charts
Fix available
1 of 1
affected package

Inefficient Regular Expression Complexity in Elasticsearch Leading to Denial of Service

Carried by container images the latest versions of 2 of 18,208 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
elasticsearchbitnami9.1.2-08.19.221
OSV records
BIT-elasticsearch-2026-102408

Charts affected

2 by stars
ChartLatestAffected imagesRadar Score
thehivestrangebee-helmOfficialVerified publisher2.0.01 of 7See more

thehive strangebee-helm 2.0.0

1 of the 7 container images this version deploys carry CVE-2026-102408.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
elasticsearch@9.1.2-0
8.19.22

Open the chart page →

16,786
daveit-at-mOfficialVerified publisher0.2.191 of 9See more

dave it-at-m 0.2.19

1 of the 9 container images this version deploys carry CVE-2026-102408.

Container imageDigestPackageFixed in
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
elasticsearch@9.1.2-0
8.19.22

Open the chart page →

15,817

Container images carrying it

1 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
bitnamilegacy/elasticsearch:9.1.2-debian-12-r000176a47afa0
elasticsearch@9.1.2-0
8.19.22
2

syft 1.42.1 · advisories as of 21 Oct 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.