# MongoDB-SSPL-1.0 license issue

**URL:** <https://discuss.elastic.co/t/mongodb-sspl-1-0-license-issue/312317>\
**Category:** Elasticsearch\
**Tags:** license\
**Created:** [August 17, 2022, 5:57pm UTC](https://discuss.elastic.co/t/mongodb-sspl-1-0-license-issue/312317 "2022-08-17T17:57:17Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![xliu](https://avatars.discourse-cdn.com/v4/letter/x/ecccb3/32.png) [@xliu](https://discuss.elastic.co/u/xliu)\
**Post date:** [August 17, 2022, 5:57pm UTC](https://discuss.elastic.co/t/mongodb-sspl-1-0-license-issue/312317/1 "2022-08-17T17:57:17Z")

</div>

We use elasticsearch 7.17.4. Nexus-iq reports 'Banned' license threat group ('MongoDB-SSPL-1.0').

Nexus IQ Server is Sonatype's policy engine. Sonatype has MongoDB-SSPL-1.0 in Banned list.

> **[04/22/19 New Licenses and Updates to Default License Threat Groups (LTGs)](https://support.sonatype.com/hc/en-us/articles/360021680953-04-22-19-New-Licenses-and-Updates-to-Default-License-Threat-Groups-LTGs-)**
>
> Sonatype Data Research has added 474 new licenses to its catalog.  These changes went live on 4/22/19.  This addition improves the license coverage and eliminates many "License-Non Standard" violat...

The policy error comes out from varous elasticsearch module and plugin.  
org.elasticsearch : elasticsearch-plugin-classloader : 7.17.4  
org.elasticsearch.plugin : lang-mustache-client : 7.17.4  
org.elasticsearch.plugin : lang-mustache-client : 7.17.4  
org.elasticsearch : elasticsearch-lz4 : 7.17.4  
...

We have the elasticsearch license. Should it cover all other needed licenses under elasticsearch?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [August 17, 2022, 6:05pm UTC](https://discuss.elastic.co/t/mongodb-sspl-1-0-license-issue/312317/2 "2022-08-17T18:05:30Z")

</div>

You need to provide more context about your issue.

What is Nexus-iq? What issue are you having with any tool from Elastic?

---

<div class="post-metadata">

**Author:** ![xliu](https://avatars.discourse-cdn.com/v4/letter/x/ecccb3/32.png) [@xliu](https://discuss.elastic.co/u/xliu)\
**Post date:** [August 17, 2022, 7:46pm UTC](https://discuss.elastic.co/t/mongodb-sspl-1-0-license-issue/312317/3 "2022-08-17T19:46:18Z")

</div>

Updated description... Nexus-iq scans jar file and reports such license issue from elasticsearch jars.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [August 17, 2022, 8:38pm UTC](https://discuss.elastic.co/t/mongodb-sspl-1-0-license-issue/312317/4 "2022-08-17T20:38:33Z")

</div>

You need to ask your legal team, this is not an Elastic issue.

If your company can only run software under OSS licenses, than you can not run Elastic as its license is not OSS anymore.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 14, 2022, 8:39pm UTC](https://discuss.elastic.co/t/mongodb-sspl-1-0-license-issue/312317/5 "2022-09-14T20:39:07Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.