CVE-2023-49921

Range taken from the CVE record, check it before committing. make newentry in security/vuxml creates the vid.

  <vuln vid="FIXME (make newentry)">
    <topic>FIXME -- FIXME</topic>
    <affects>
      <package>
	<name>py312-elasticsearch7</name>
	<range><lt>7.17.16</lt></range>
      </package>
    </affects>
    <description>
      <body xmlns="http://www.w3.org/1999/xhtml">
	<p>An issue was discovered by Elastic whereby Watcher search input logged
	the search query results on DEBUG log level. This could lead to raw
	contents of documents stored in Elasticsearch to be printed in logs.
	Elastic has released 8.11.2 and 7.17.16 that resolves this issue by
	removing this excessive logging. This issue only affects users that
	use Watcher and have a Watch defined that uses the search input and
	additionally have set the search input’s logger to DEBUG or finer,
	for example using: org.elasticsearch.xpack.watcher.input.search,
	org.elasticsearch.xpack.watcher.input,
	org.elasticsearch.xpack.watcher, or wider, since the loggers are
	hierarchical.</p>
      </body>
    </description>
    <references>
      <cvename>CVE-2023-49921</cvename>
      <url>https://nvd.nist.gov/vuln/detail/CVE-2023-49921</url>
    </references>
    <dates>
      <discovery>2024-07-26</discovery>
      <entry>2026-10-26</entry>
    </dates>
  </vuln>