Skip to content
OpenAdvisories

Package · RubyGems

opensearch-ruby

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2022-31115

    Unsafe YAML deserialization in opensearch-ruby

    opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. In versions prior to 2.0.1 the ruby `YAML.load` function was used instead of `YAML.safe_load`. As a result opensearch-ruby 2.0.0 and prior can lead to unsafe deserialization using …

    opensearch-project opensearch-ruby opensearch-ruby RubyGems