CVE details
CVE-2026-72645
Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated user holding only read privileges on a single index can submit one small, specially crafted search request that causes an excessively large memory allocation, exhausting the JVM heap and terminating the affected node.
Matched ports (1)
| Port | Package | Version | Status | Maintainer |
|---|---|---|---|---|
| textproc/py-elasticsearch | py312-elasticsearch | 9.5.1 | fixed by update | sunpoet@FreeBSD.org |