https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T18:32:37.091273+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-42399 CVE-2026-42399 — Uncontrolled Resource Consumption in Kibana Leading to Denial of Service 2026-10-02T18:32:37.110430+00:00

Affected: Elastic Kibana

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can cause Kibana to consume exponentially increasing amounts of memory by submitting a specially crafted Timelion visualization expression containing deeply chained function calls. The resulting data structure grows without bound, exhausting available memory and causing the Kibana service to crash and become unavailable to all users.

 https://vulnerability.circl.lu/vuln/ghsa-hcw2-vpp7-52v9 GHSA-hcw2-vpp7-52v9 2026-10-02T18:32:37.110597+00:00

Uncontrolled Resource Consumption (CWE-400) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130). An authenticated low-privileged user can cause Kibana to consume exponentially increasing amounts of memory by submitting a specially crafted Timelion visualization expression containing deeply chained function calls. The resulting data structure grows without bound, exhausting available memory and causing the Kibana service to crash and become unavailable to all users.