amazon_opensearch_service vulnerabilities

CVEs whose affected-version data names the amazon_opensearch_service package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-84942High· 8.7

2w ago

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser…

Improper input validation in the Vega expression function implementation in OpenSearch Dashboards allows a remote authenticated actor with dashboard write permissions to execute arbitrary JavaScript in the context of other users' browser…

▾ TwilightAWS · Amazon OpenSearch ServiceEPSS 0.54%via NVD