MEDIUM6.5
GHSA-3gg4-6hqg-2vjx
Logstash Logs Sensitive Information
Quick fix
GHSA-3gg4-6hqg-2vjx — logstash-core: upgrade to the fixed version with the command below.
bundle update logstash-coreDetails
Prior to Logstash version 5.0.1, Elasticsearch Output plugin when updating connections after sniffing, would log to file HTTP basic auth credentials.
Are you affected?
Enter the version of the package you're using.