# Elasticsearch 8.8.2 vulnerabilities issue

**URL:** <https://discuss.elastic.co/t/elasticsearch-8-8-2-vulnerabilities-issue/367086>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [September 25, 2024, 7:24am UTC](https://discuss.elastic.co/t/elasticsearch-8-8-2-vulnerabilities-issue/367086 "2024-09-25T07:24:08Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sandeep6](https://avatars.discourse-cdn.com/v4/letter/s/f4b2a3/32.png) [@Sandeep6](https://discuss.elastic.co/u/Sandeep6)\
**Post date:** [September 25, 2024, 7:24am UTC](https://discuss.elastic.co/t/elasticsearch-8-8-2-vulnerabilities-issue/367086/1 "2024-09-25T07:24:08Z")

</div>

Hi Team,

We have elasticsearch version **8.8.2** , and it is in this version that we discovered the vulnerability issue.  
So, how can I avoid this issue? And what is the new updated version where there are no vulnerabilities, so I can migrate to that version?

**Note:**  
Elasticsearch Kibana Broken Access Control Vulnerability (ESA-2024-01)  
Elasticsearch Kibana Denial of Service (DoS) Vulnerability (ESA-2024-01)  
Elasticsearch Kibana Prototype Pollution Vulnerability

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [September 25, 2024, 7:28am UTC](https://discuss.elastic.co/t/elasticsearch-8-8-2-vulnerabilities-issue/367086/2 "2024-09-25T07:28:55Z")

</div>

The issue you linked to [seem to have been fixed](https://discuss.elastic.co/t/kibana-8-12-1-security-update-esa-2024-01/352686), so I would recommend upgrading to the latest version, which at the moment is 8.15.1.