{ "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json", "bomFormat": "CycloneDX", "specVersion": "1.6", "serialNumber": "urn:uuid:0ea06582-60b2-565e-95be-21aea2d77101", "version": 1, "metadata": { "supplier": { "name": "TuxCare", "url": [ "https://tuxcare.com" ] } }, "components": [ { "name": "lang-mustache-client", "purl": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1", "type": "library", "group": "org.elasticsearch.plugin", "bom-ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1", "version": "7.17.15-tuxcare.1", "pedigree": { "ancestors": [ { "name": "lang-mustache-client", "purl": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15", "type": "library", "group": "org.elasticsearch.plugin", "version": "7.17.15" } ] }, "supplier": { "url": [ "https://tuxcare.com" ], "name": "TuxCare" } } ], "vulnerabilities": [ { "id": "CVE-2014-3120", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:e70ae4ee-9254-5f0a-98c0-62fba8926736", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-3120 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2014-6439", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:3b6a6b23-086e-5b84-af5b-51f35aa9458b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2014-6439 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2015-1427", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:86289c8a-f9e2-5a62-819c-999445b89542", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-1427 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2015-3337", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:352a2457-e26d-56bf-9350-a862083ba359", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-3337 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2015-4165", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:5c024ce8-6862-5524-9ef0-819227c0c523", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-4165 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2015-5531", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:6abcacb4-6350-511e-9595-4d298765783a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2015-5531 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2018-17244", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:e0d32782-3a1e-5721-8e68-7d0d67671daf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-17244 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2018-17247", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:0c2a1a33-85fe-5865-b697-628088baee4d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-17247 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2018-3824", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:0cb1dfef-c80e-5716-b913-641abac0a00b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-3824 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2018-3831", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:b2250808-885b-5d16-9cae-b2dbb2ab84ee", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2018-3831 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2019-7611", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:46954ca3-50e2-5ecb-9090-58ed9beef96b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7611 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2019-7614", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:a85313df-a73b-560b-bf9d-bd9aca3edc84", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7614 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2019-7619", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:a641a1f8-2829-5463-b5e5-473e965cb63a", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2019-7619 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2020-7009", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:89021a92-ee8e-5b0d-bf5a-28a379f175ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7009 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2020-7014", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:dda1037a-036c-55ef-be48-77cb8d8eaad1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7014 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2020-7019", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:8831840f-826a-5449-8724-f609040209a9", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7019 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2020-7020", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:41a5b704-3902-5608-8a48-108dbe6f27c6", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7020 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2020-7021", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:0527622f-60d5-59f1-b43a-49e2f232a0c3", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2020-7021 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2021-22132", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:75cb1ba8-aae1-56d8-be6c-c710a01378ce", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22132 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2021-22134", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:9d3df27b-fbe1-541e-9ed1-9f36b730aacf", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22134 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2021-22135", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:6059a6ff-529b-5603-a2fc-1e534690c66b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22135 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2021-22137", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:59516e7e-349b-5c7c-a02a-2f6e92fd7455", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22137 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2021-22144", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:effbd65b-805b-5702-9177-a2d95a774508", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22144 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2021-22145", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:7694b9dc-bc89-5b42-92e0-1715565fc8dd", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22145 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2021-22147", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:ce5c66c2-85e9-5be8-95e0-929d4223c00b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2021-22147 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2022-23708", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:a9e75d18-bd00-5fba-931a-00f9bd514293", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23708 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2022-23710", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:53550d80-7eb2-5a55-9fe8-40d540933ffd", "analysis": { "state": "false_positive", "detail": "Vulnerability CVE-2022-23710 is a false positive for org.elasticsearch.plugin:lang-mustache-client 7.17.15-tuxcare.1." } }, { "id": "CVE-2022-23712", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:9f9c7d40-4799-5d59-bcc6-03b70e9dae92", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2022-23712 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2023-31417", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:74de722a-38c8-5258-a4c3-5feaeebc6411", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31417 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2023-31418", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:8dac7ef3-ae83-5f8f-b9ab-b6af1f12621d", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31418 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2023-31419", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:5379c034-22c5-5ae8-8237-5e28bca1a94b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-31419 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2023-46673", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:df885311-69f6-5d74-a212-6688904caf18", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-46673 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2023-49921", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:f4d9b69f-ace7-55c0-a546-84dca610d62f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2023-49921 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-12539", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:02926284-a6bc-5983-9078-d9a7365704da", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-12539 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-23444", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:fa7a9919-4df6-5a41-9571-683449641770", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-23444 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-23446", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:07404952-f8a1-53f6-a479-5ff2cd6eff58", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23446 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-23449", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:04942d47-6995-587b-a5a4-3c9be1c4431f", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23449 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-23450", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:096fdba3-4d80-55b1-9b1f-852b9768c6d2", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23450 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-23451", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:626ad7ae-be64-5b5f-aab2-de6ab1a811c1", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-23451 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-37280", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:4ea3c008-d4bc-5064-b643-3090dfc64b51", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-37280 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-43709", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:75f8ba22-b943-5523-9fce-ccaeacb5a63a", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-43709 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-52979", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:ecd490cd-e47f-5551-b49f-b674ec004cb9", "analysis": { "state": "resolved", "detail": "Vulnerability CVE-2024-52979 is fixed in version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-52980", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:bb6e795d-5ad8-54c5-b46f-974df098597b", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52980 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2024-52981", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:1eca6d63-8371-5b7b-a61a-514594035d36", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2024-52981 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2025-37727", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:9f036d62-a54a-54bc-84b6-4a3f5deca347", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-37727 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2025-37731", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:9694c590-83de-541f-9708-19368394bc15", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-37731 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } }, { "id": "CVE-2025-68384", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:ccf05b8d-3efb-53b6-b4ef-f268c6d5ab5c", "analysis": { "state": "not_affected", "detail": "Vulnerability CVE-2025-68384 does not affect version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client. not_affected \u2014 Elasticsearch 7.17.15 does not contain the User Profile feature (ProfileService) that is affected by CVE-2025-68384. The vendor patches add size validation to ProfileService.updateProfileData(), which stores user profile labels and applicationData. This entire feature was introduced in Elasticsearch 8.2+ and is completely absent from the 7.x series. Exhaustive searches confirm no ProfileService...", "justification": "code_not_present" } }, { "id": "CVE-2025-68390", "affects": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ], "bom-ref": "urn:uuid:c7ee1cce-c66a-5e2d-ba6c-ed97e98e9b45", "analysis": { "state": "exploitable", "detail": "Vulnerability CVE-2025-68390 affects version 7.17.15-tuxcare.1 of org.elasticsearch.plugin:lang-mustache-client." } } ], "dependencies": [ { "ref": "pkg:maven/org.elasticsearch.plugin/lang-mustache-client@7.17.15-tuxcare.1" } ] }