Elasticsearch Vulnerabilities

Elastic Stack Elasticsearch
2

For the first one it applies only on enterprise version see : Elastic Stack 7.9.3 and 6.8.13 Security Update

I suggest you to dig a bit more for the others since it's a interesting question.

I wonder how they manage oss and enterprise security