# Kibana version 8.12.0 Vulnerabilities

**URL:** <https://discuss.elastic.co/t/kibana-version-8-12-0-vulnerabilities/358578>\
**Category:** Kibana\
**Created:** [May 1, 2024, 5:31pm UTC](https://discuss.elastic.co/t/kibana-version-8-12-0-vulnerabilities/358578 "2024-05-01T17:31:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![baskarsp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/baskarsp/32/134029_2.png) [@baskarsp](https://discuss.elastic.co/u/baskarsp)\
**Post date:** [May 1, 2024, 5:31pm UTC](https://discuss.elastic.co/t/kibana-version-8-12-0-vulnerabilities/358578/1 "2024-05-01T17:31:09Z")

</div>

Hello Team,  
Currently we are using elastic Kibana version 8.12.0, and our internal security tool identified there are three critical Vulnerabilities as provided below in the screenshot with Kibana version 8.12.0. Could you please let me know more details about how these reported CVE packages are used in Kibana and what would be the actual impact of these Vulnerabilities in Kibana while using it.

Also let us know if you have any other details for those vulnerabilities how it can be addressed.

[https://nvd.nist.gov/vuln/detail/CVE-2023-42282](https://nvd.nist.gov/vuln/detail/CVE-2023-42282)  
[https://nvd.nist.gov/vuln/detail/CVE-2023-36665](https://nvd.nist.gov/vuln/detail/CVE-2023-36665)

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/c/d/cde0985f607782e025963641f07e5c8e6bc30eba.jpeg)

---

<div class="post-metadata">

**Author:** ![Marco\_Liberati](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marco_liberati/32/82953_2.png) [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)\
**Post date:** [May 2, 2024, 2:19pm UTC](https://discuss.elastic.co/t/kibana-version-8-12-0-vulnerabilities/358578/2 "2024-05-02T14:19:37Z")

</div>

Hi @baskarsp

you can email with the description of the issue to [security@elastic.co](mailto:security@elastic.co) .  
For more info about our security policy, please refer to: [Security issues | Elastic](https://www.elastic.co/community/security)

---

<div class="post-metadata">

**Author:** ![baskarsp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/baskarsp/32/134029_2.png) [@baskarsp](https://discuss.elastic.co/u/baskarsp)\
**Post date:** [May 3, 2024, 5:43am UTC](https://discuss.elastic.co/t/kibana-version-8-12-0-vulnerabilities/358578/3 "2024-05-03T05:43:32Z")

</div>

Thank you Marco. I sent a email to [security@elastic.co](mailto:security@elastic.co) and few days ago and i am still waiting for feedback.