Openssl-1.1.1f-1ubuntu2.24 in ELK docker container with critical vulnerability

Elastic Search
1

According to Dependency Track, the Elasticsearch container contains vulnerabilities in openssl-1.1.1f-1ubuntu2.24 ( CVE-2022-1292 per example).
Version 8.17.3 is deployed which should be the latest version.

2

Welcome!

Thank you for your report.

Elastic's security reporting guidelines are available at Security issues | Elastic.

Per those guidelines, all reports of potential security issues or vulnerabilities should be sent via email to security@elastic.co.

We are unable to discuss potential issues of this nature here. Please send your report to the email address above, where it can be appropriately handled.