# Elasticsearch vulnerability issue

**URL:** <https://discuss.elastic.co/t/elasticsearch-vulnerability-issue/375373>\
**Category:** Kibana\
**Tags:** elastic-stack-security\
**Created:** [March 4, 2025, 12:01pm UTC](https://discuss.elastic.co/t/elasticsearch-vulnerability-issue/375373 "2025-03-04T12:01:40Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![linuxadmins](https://avatars.discourse-cdn.com/v4/letter/l/5f9b8f/32.png) [@linuxadmins](https://discuss.elastic.co/u/linuxadmins)\
**Post date:** [March 4, 2025, 12:01pm UTC](https://discuss.elastic.co/t/elasticsearch-vulnerability-issue/375373/1 "2025-03-04T12:01:40Z")

</div>

Dear Recipient,

The Tanable application has found a problem with the elasticsearch nodejs high built into kibana, the number is CVE: CVE-2025-23083,CVE-2025-23084,CVE-2025-23085.

We would like guidance on this, when it will be fixed and how we can fix the vulnerability.

Thank you:  
Szilvia Hável  
Linux System Administrator

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [March 4, 2025, 1:25pm UTC](https://discuss.elastic.co/t/elasticsearch-vulnerability-issue/375373/2 "2025-03-04T13:25:04Z")

</div>

Hello,

You need to send an email to `security@elastic.co` with those CVEs so they can investigate and check if it applies to Kibana or not.