# Node.js vulnerabilities impact to Kibana

**URL:** <https://discuss.elastic.co/t/node-js-vulnerabilities-impact-to-kibana/391150>\
**Category:** Kibana\
**Created:** [October 24, 2026, 6:13am UTC](https://discuss.elastic.co/t/node-js-vulnerabilities-impact-to-kibana/391150 "2026-10-24T06:13:53Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![neoprabu](https://avatars.discourse-cdn.com/v4/letter/n/b5e925/32.png) [@neoprabu](https://discuss.elastic.co/u/neoprabu)\
**Post date:** [October 24, 2026, 6:13am UTC](https://discuss.elastic.co/t/node-js-vulnerabilities-impact-to-kibana/391150/1 "2026-10-24T06:13:53Z")

</div>

Hi, Is there any patch or work-around or mitigation available to address Node.js vulnerabilities like CVE-2026-111497 in Elasticsearch. Please advise. Thanks.

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [November 2, 2026, 10:23am UTC](https://discuss.elastic.co/t/node-js-vulnerabilities-impact-to-kibana/391150/2 "2026-11-02T10:23:08Z")

</div>

Hi @neoprabu,

Welcome! I assume you're asking about remediation for Kibana rather than Elasticsearch given this is a Node.js vulnerability?

I see that the team have merged a fix and it will be made available in the upcoming Kibana version.

Hope that helps!

---

<div class="post-metadata">

**Author:** ![Nataraj](https://avatars.discourse-cdn.com/v4/letter/n/91b2a8/32.png) [@Nataraj](https://discuss.elastic.co/u/Nataraj)\
**Post date:** [November 2, 2026, 12:23pm UTC](https://discuss.elastic.co/t/node-js-vulnerabilities-impact-to-kibana/391150/3 "2026-11-02T12:23:45Z")

</div>

Hi @carly.richmond : Yes, our scan has reported issue with Kibana and not with Elastic search

---

<div class="post-metadata">

**Author:** ![Nataraj](https://avatars.discourse-cdn.com/v4/letter/n/91b2a8/32.png) [@Nataraj](https://discuss.elastic.co/u/Nataraj)\
**Post date:** [November 4, 2026, 1:42pm UTC](https://discuss.elastic.co/t/node-js-vulnerabilities-impact-to-kibana/391150/4 "2026-11-04T13:42:24Z")

</div>

Hi @carly.richmond : when we can expect the kibana release with a fix for CVE-2026-111497 (**[Node.js vulnerabilities](https://discuss.elastic.co/t/node-js-vulnerabilities-impact-to-elasticsearch/391150)**). Meanwhile, is there any other UI / interface which we can use to query Elastic search

---

<div class="post-metadata">

**Author:** ![carly.richmond](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/carly.richmond/32/104935_2.png) [@carly.richmond](https://discuss.elastic.co/u/carly.richmond)\
**Post date:** [November 4, 2026, 2:33pm UTC](https://discuss.elastic.co/t/node-js-vulnerabilities-impact-to-kibana/391150/5 "2026-11-04T14:33:15Z")

</div>

Hi @Nataraj,

The fix has been released. You can read more details on the impacted and fix versions in [this security announcement](https://discuss.elastic.co/t/kibana-8-19-24-9-4-9-9-5-6-security-update-esa-2026-232/391369).

Hope that helps!