I submitted multiple security vulnerability reports affecting Elastic software in April 2025.
As of today, I have not received any acknowledgment from Elastic regarding the submissions.
For internal reference, the ServiceNow case is SEC0003547.
I understand product security issues aren’t handled here. However, I’ve already contacted security@elastic.co and have not received any response.
I’m requesting internal escalation to ensure the security team is aware and can respond accordingly. Please escalate this matter.
Hello @skraft9,
We are aware of the bug bounty reports and we will respond there.
Thank you for your patience.
-Brian Leviine
Director Product Security | Elastic