CVE-2022-30123 - Rack Vulnerability

Elastic Stack Logstash
1

Security Scan has flagged Critical CVE-2022-30123 Rack::RELEASE in the logstash 8.7.1 tar file.

How can we remove rack or upgrade to a newer version?

Thanks,
Priya V

2

Please see Security issues | Elastic for how to raise these sorts of queries;

Users and customers may report any other potential security issues to security@elastic.co. This address can be used for product security related inquiries or requests about other security topics that are not explicitly mentioned here. We can accept only security issues at this address. Bug reports should be directed to the bug database of the project you're reporting it on or raised to Elastic Support.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.