Is there a published SBOM anywhere for Elasticsearch or any other document that shares all the components/libraries used within the application? This would be helpful when investigating security vulnerabilities and determining if a specific vulnerability affects Elasticsearch.

Elasticsearch Software Bill of Materials (SBOM)

warkolm (Mark Walkom) February 9, 2022, 10:39pm 2

Welcome to our community!

I don't believe this is something we publish, nor can I find a reference for it internally. I would suggest you reach out to security@elastic.co as per Security issues | Elastic.

Topic		Replies	Views
Software Security Process Elasticsearch	3	513	April 14, 2020
Open Source Vulnerabilities Endpoint Security	10	152	June 25, 2025
Elastic Security Vulnerabilities feed Elastic Community and Ecosystem	0	70	May 27, 2025
Is there a security mailing list? Elasticsearch	5	796	July 6, 2017
Elastic Search Static Application Security Testing Report Elasticsearch	2	544	September 8, 2017

Elasticsearch Software Bill of Materials (SBOM)

Related topics