Elasticsearch 8.8.2 vulnerabilities issue

Elastic Stack Elasticsearch
1

Hi Team,

We have elasticsearch version 8.8.2, and it is in this version that we discovered the vulnerability issue.
So, how can I avoid this issue? And what is the new updated version where there are no vulnerabilities, so I can migrate to that version?

Note:
Elasticsearch Kibana Broken Access Control Vulnerability (ESA-2024-01)
Elasticsearch Kibana Denial of Service (DoS) Vulnerability (ESA-2024-01)
Elasticsearch Kibana Prototype Pollution Vulnerability

2

The issue you linked to seem to have been fixed, so I would recommend upgrading to the latest version, which at the moment is 8.15.1.