# Expected resolution for some vulnerabilities found

**URL:** <https://discuss.elastic.co/t/expected-resolution-for-some-vulnerabilities-found/370223>\
**Category:** Elasticsearch\
**Tags:** elastic-stack-security\
**Created:** [November 8, 2024, 1:41pm UTC](https://discuss.elastic.co/t/expected-resolution-for-some-vulnerabilities-found/370223 "2024-11-08T13:41:28Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Natalia\_Mellino](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/natalia_mellino/32/137449_2.png) [@Natalia\_Mellino](https://discuss.elastic.co/u/Natalia_Mellino)\
**Post date:** [November 8, 2024, 1:41pm UTC](https://discuss.elastic.co/t/expected-resolution-for-some-vulnerabilities-found/370223/1 "2024-11-08T13:41:28Z")

</div>

Hi! We are currently in production using Kibana and Elasticsearch with the 8.15.3 version (both of them). We were reported with some vulnerabilities that we'd need to fix as soon as possible:

KIbana:

- CVE-2024-7774
- CVE-2024-7042

Elasticsearch:

- CVE-2023-52428

The info we'd need to know is if there will be a fix for them in the next Elasticsearch/Kibana release, or if at least it is planned to solve them. Thanks in advance for the help and let me know if you need more info from our side.

---

<div class="post-metadata">

**Author:** ![DavidTurner](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/davidturner/32/22453_2.png) [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Post date:** [November 9, 2024, 3:05pm UTC](https://discuss.elastic.co/t/expected-resolution-for-some-vulnerabilities-found/370223/2 "2024-11-09T15:05:14Z")

</div>

Thank you for your report.

Elastic's security reporting guidelines are available at [Security issues | Elastic](https://www.elastic.co/community/security). Per those guidelines, all reports of potential security issues or vulnerabilities should be sent via email to [security@elastic.co](mailto:security@elastic.co)

We are unable to discuss potential issues of this nature here. Please send your report to the email address above, where it can be appropriately handled.
