What’s Vulnerable › Products

opensearch-project data-prepper vulnerabilities

3 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your opensearch-project data-prepper version is affected

Exploited opensearch-project data-prepper vulnerabilities

• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest opensearch-project data-prepper vulnerabilities

• CVE-2025-62371 — OpenSearch Data Prepper plugins trusts all SSL certificates by default (CVSS 7.4)
• CVE-2024-55886 — OpenTelemetry Logs source may lack authentication with some custom plugins (CVSS 6.9)
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited