# Elastic Open Crawler - Recent Container CVEs

**URL:** <https://discuss.elastic.co/t/elastic-open-crawler-recent-container-cves/385828>\
**Category:** Elastic Search\
**Tags:** docker\
**Created:** [April 9, 2026, 2:51pm UTC](https://discuss.elastic.co/t/elastic-open-crawler-recent-container-cves/385828 "2026-04-09T14:51:58Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![alongaks](https://avatars.discourse-cdn.com/v4/letter/a/df705f/32.png) [@alongaks](https://discuss.elastic.co/u/alongaks)\
**Post date:** [April 9, 2026, 2:51pm UTC](https://discuss.elastic.co/t/elastic-open-crawler-recent-container-cves/385828/1 "2026-04-09T14:51:58Z")

</div>

Hello,

I have been using the Elastic Open Crawler for some time now. In general, it has been a nice, functional replacement for the deprecated Enterprise Search Crawler.

When my Elastic Open Crawler container(s) launch, they launch with either the `docker.elastic.co/integrations/crawler:latest` or `docker.elastic.co/integrations/crawler:0.4.2` image.

```auto
docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
6c52ec83e23e docker.elastic.co/integrations/crawler:latest "/bin/bash" 20 hours ago Up 20 hours crawler

```

```auto
bash-5.3$ cat product_version
0.4.2

```

Within the running container the rack version appears to be different than the recently pushed CVE fixes:

```auto
bash-5.3$ egrep 'rack|java' Gemfile Gemfile.lock
Gemfile: gem 'rack', '~> 2.2.14'

Gemfile.lock: rack (2.2.16)
Gemfile.lock: rack (>= 1.0.0)
Gemfile.lock: universal-java-17
Gemfile.lock: universal-java-21
Gemfile.lock: universal-java-22
Gemfile.lock: universal-java-23
Gemfile.lock: rack (~> 2.2.14)

```

And I suppose for the other ruby-maven removal CVE in the Dockerfile.

---

<div class="post-metadata">

**Author:** ![alongaks](https://avatars.discourse-cdn.com/v4/letter/a/df705f/32.png) [@alongaks](https://discuss.elastic.co/u/alongaks)\
**Post date:** [April 14, 2026, 5:59pm UTC](https://discuss.elastic.co/t/elastic-open-crawler-recent-container-cves/385828/2 "2026-04-14T17:59:55Z")

</div>

Conversation being held here: [Elastic Open Crawler - Recent Container CVEs · Issue #430 · elastic/crawler](https://github.com/elastic/crawler/issues/430)

This thread can be locked/closed.