Login Request a demo
LO
Product
Logstash
by Elastic · last CVE Apr 8, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 2High 5Medium 4Low 1
Severity
All severities14Critical2High5Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Logstash to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-37730
6.5
0%
May 6
Logstash Improper Certificate Validation in TCP output
Affected: 8.0.0 before 8.17.6; 8.18.0 before 8.18.1; 9.0.0 before 9.0.1
CVE-2018-3817
6.5
1%
Mar 30
When logging warnings regarding deprecated settings, Logstash before 5.6.6 and 6.x before 6.1.2 could inadvertently log sensitive information
Affected: before 5.6.6; 6.0.0 before 6.1.2
CVE-2015-5619
5.9
1%
Aug 9
Logstash 1.4.x before 1.4.5 and 1.5.x before 1.5.4 with Lumberjack output or the Logstash forwarder does not validate SSL/TLS certificates from the Logstash server, which might…
Affected: 1.4.0; 1.4.1; 1.4.2
CVE-2023-46672
5.5
0%
Nov 15
Logstash Insertion of Sensitive Information into Log File
Affected: 8.10.0 before 8.11.1
Showing 4