Skip to content
OpenAdvisories

Package · npm

@opensearch-project/opensearch

1 known vulnerabilities.

Malicious versions reported for this package

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.6
    GHSA-27f5-xjrr-q9ff

    Malware in @opensearch-project/opensearch

    ## Overview The OpenSearch Project has sustained a security incident involving an external actor gaining force-push permissions within the project's CI infrastructure to embed malicious packages into four release versions of `@opensearch-project/opensearch`. …

    @opensearch-project/opensearch npm