VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/elastic/beats: vulnerability history, versions and safety

github.com/elastic/beats is a package in the Go ecosystem. Vulert records 8 vulnerabilities for it across 120 releases, from Feb 2022 to Apr 2026. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
8 vulnerabilities recorded H2 U6
i
5 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
6 in the last 12 months

Most recent disclosure 07 Apr 2026.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/elastic/beats vulnerabilities

Vulert verdict on github.com/elastic/beats v7.6.2+incompatible i

Updated on 23 Oct 2026

Careful: v7.6.2+incompatible has 7 known vulnerabilities, and 5 have no fix yet. Use an earlier safe version, or the workaround listed for each one.

Package health score 50/100
  • Security Unfixed issues
  • Maintenance Slowing
  • Popularity Key ecosystem project
  • Community Moderate

The current release has a vulnerability with no published fix, which caps this score.

What to do: Pin an earlier, unaffected release if you can, and apply the workaround each vulnerability lists until a fix is published. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v7.6.2+incompatible — affected i
  • Vulnerabilities on record 8 over 4 years · 6 in the last year i
  • Latest disclosure 07 Apr 2026 i
  • Highest CVSS 7.5 i
  • With no published fix 5 i
  • Stars 12,652 i
  • OpenSSF scorecard 5/10 i
  • Last release 78 months ago i
  • Licence Apache-2.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/elastic/beats, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v7.5.3-0.20250205182936-0ec96758df27+incompatible 05 Feb 2025 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20250205182931-233e201b027c+incompatible 05 Feb 2025 H1 U6 Apache-2.0 No Details →
v1.0.2-0.20230320184854-cf3b32c05724 20 Mar 2023 H1 U6 Apache-2.0 No Details →
v6.8.24-0.20221103001203-2164e2c265e2+incompatible 03 Nov 2022 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20221103001157-ef1fcbd39527+incompatible 03 Nov 2022 H1 U6 Apache-2.0 No Details →
v6.4.4-0.20221102174046-53a1ccfa7fc6+incompatible 02 Nov 2022 H1 U6 Apache-2.0 No Details →
v7.0.2-0.20221101202619-0b75e6a84dd9+incompatible 01 Nov 2022 H1 U6 Apache-2.0 No Details →
v7.5.3-0.20221101202409-edaa07b7f9a6+incompatible 01 Nov 2022 H1 U6 Apache-2.0 No Details →
v7.3.3-0.20221101202305-6fd243b437a0+incompatible 01 Nov 2022 H1 U6 Apache-2.0 No Details →
v7.1.2-0.20221101202213-3117277048f8+incompatible 01 Nov 2022 H1 U6 Apache-2.0 No Details →
v6.1.5-0.20221030184259-84f0799995d5+incompatible 30 Oct 2022 H1 U6 Apache-2.0 No Details →
v6.8.24-0.20220208062020-f313c4c5bd74+incompatible 08 Feb 2022 H1 U6 Apache-2.0 No Details →
v6.8.24-0.20220128060911-54c27b339466+incompatible 28 Jan 2022 H1 U6 Apache-2.0 No Details →
v6.8.24-0.20220121060033-f37eb965fd38+incompatible 21 Jan 2022 H1 U6 Apache-2.0 No Details →
v6.8.24-0.20220113172830-76e72e3d660c+incompatible 13 Jan 2022 H1 U6 Apache-2.0 No Details →
v0.0.0-20220104055854-5e745016b24e 04 Jan 2022 H1 U6 Apache-2.0 No Details →
v6.8.23+incompatible 04 Jan 2022 H1 U6 Apache-2.0 No Details →
v6.8.23-0.20211219153608-dd6ec7fbe724+incompatible 19 Dec 2021 H1 U6 Apache-2.0 No Details →
v6.8.22+incompatible 17 Dec 2021 H1 U6 Apache-2.0 No Details →
v6.8.22-0.20211213161438-e8c6b5646876+incompatible 13 Dec 2021 H1 U6 Apache-2.0 No Details →
v6.8.21+incompatible 09 Dec 2021 H1 U6 Apache-2.0 No Details →
v6.8.21-0.20211014144000-541c704db0ab+incompatible 14 Oct 2021 H1 U6 Apache-2.0 No Details →
v6.8.20+incompatible 07 Oct 2021 H1 U6 Apache-2.0 No Details →
v6.8.20-0.20210921175200-41d7b94c60cf+incompatible 21 Sep 2021 H1 U6 Apache-2.0 No Details →
v6.8.19+incompatible 13 Sep 2021 H1 U6 Apache-2.0 No Details →
v6.8.19-0.20210803064458-c7039fca01b8+incompatible 03 Aug 2021 H1 U6 Apache-2.0 No Details →
v6.8.18+incompatible 28 Jul 2021 H1 U6 Apache-2.0 No Details →
v6.8.18-0.20210719162920-634215d28c1e+incompatible 19 Jul 2021 H1 U6 Apache-2.0 No Details →
v6.8.18-0.20210707130845-f0c2c1da5483+incompatible 07 Jul 2021 H1 U6 Apache-2.0 No Details →
v6.8.17+incompatible 01 Jun 2021 H1 U6 Apache-2.0 No Details →
v6.8.17-0.20210525152930-1cca736f097b+incompatible 25 May 2021 H1 U6 Apache-2.0 No Details →
v6.8.16+incompatible 02 Apr 2021 H1 U6 Apache-2.0 No Details →
v6.8.16-0.20210323162941-5835f5da4889+incompatible 23 Mar 2021 H1 U6 Apache-2.0 No Details →
v6.8.15+incompatible 17 Feb 2021 H1 U6 Apache-2.0 No Details →
v6.8.15-0.20210217114953-74865c280e57+incompatible 17 Feb 2021 H1 U6 Apache-2.0 No Details →
v6.8.14+incompatible 08 Dec 2020 H1 U6 Apache-2.0 No Details →
v6.8.14-0.20201023002753-5cab1521847a+incompatible 23 Oct 2020 H1 U6 Apache-2.0 No Details →
v6.8.14-0.20201022152516-6741ca16363f+incompatible 22 Oct 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20201014100231-d36c763ca1fd 14 Oct 2020 H1 U6 Apache-2.0 No Details →
v6.8.13+incompatible 14 Oct 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200923230314-112f093ce73a+incompatible 23 Sep 2020 H1 U6 Apache-2.0 No Details →
v6.8.13-0.20200818131431-4822bb400866+incompatible 18 Aug 2020 H1 U6 Apache-2.0 No Details →
v6.8.12+incompatible 29 Jul 2020 H1 U6 Apache-2.0 No Details →
v6.8.12-0.20200727192112-53e8244d72a3+incompatible 27 Jul 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200720073509-1bb524d04797+incompatible 20 Jul 2020 H1 U6 Apache-2.0 No Details →
v6.8.11+incompatible 08 Jul 2020 H1 U6 Apache-2.0 No Details →
v7.5.3-0.20200629232406-ad2d30385c0d+incompatible 29 Jun 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200629232230-5974c3ee71c9+incompatible 29 Jun 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200611144306-d4250589f73a+incompatible 11 Jun 2020 H1 U6 Apache-2.0 No Details →
v6.8.11-0.20200603124046-970a26b80eb0+incompatible 03 Jun 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200602173239-f807b12ea412+incompatible 02 Jun 2020 H1 U6 Apache-2.0 No Details →
v6.8.10+incompatible 13 May 2020 H1 U6 Apache-2.0 No Details →
v6.8.10-0.20200513123606-4e10965a5435+incompatible 13 May 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200512220850-d4229d264dc2+incompatible 12 May 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200508132132-08561699c92c+incompatible 08 May 2020 H1 U6 Apache-2.0 No Details →
v6.8.9+incompatible 27 Apr 2020 H1 U6 Apache-2.0 No Details →
v6.8.9-0.20200427204659-75d698ad90ad+incompatible 27 Apr 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200427204601-25cc733f3e42+incompatible 27 Apr 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200422131216-2237392fceef+incompatible 22 Apr 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200418012026-79bfb6412b7d 18 Apr 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200418012026-79bfb6412b7d+incompatible 18 Apr 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200409144553-dd9b6989e57f+incompatible 09 Apr 2020 H1 U6 Apache-2.0 No Details →
v7.6.3-0.20200404154344-da93eb503f93+incompatible 04 Apr 2020 H1 U6 Apache-2.0 No Details →
v6.8.9-0.20200331144658-8b072a7e0739+incompatible 31 Mar 2020 H1 U6 Apache-2.0 No Details →
v7.6.2+incompatible 25 Mar 2020 H1 U6 Apache-2.0 No Details →
v7.6.2-0.20200325182422-d57bcf868460+incompatible 25 Mar 2020 H1 U6 Apache-2.0 No Details →
v7.6.2-0.20200321025622-60b14fa4046a+incompatible 21 Mar 2020 H1 U6 Apache-2.0 No Details →
v7.6.2-0.20200320134539-fb01d473d047+incompatible 20 Mar 2020 H1 U6 Apache-2.0 No Details →
v7.6.2-0.20200319214256-06cb46973ffd+incompatible 19 Mar 2020 H1 U6 Apache-2.0 No Details →
v7.6.2-0.20200316155112-c3c9f3458a80+incompatible 16 Mar 2020 H1 U6 Apache-2.0 No Details →
v7.6.2-0.20200313220916-1a70200615a8+incompatible 13 Mar 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200305132752-ecd273d59ab8 05 Mar 2020 H1 U6 Apache-2.0 No Details →
v6.8.8+incompatible 05 Mar 2020 H1 U6 Apache-2.0 No Details →
v6.8.8-0.20200305132752-ecd273d59ab8+incompatible 05 Mar 2020 H1 U6 Apache-2.0 No Details →
v6.8.8-0.20200304144539-05ee592767ee+incompatible 04 Mar 2020 H1 U6 Apache-2.0 No Details →
v7.6.2-0.20200303023045-d074587ecb05+incompatible 03 Mar 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200302043353-755227da8501 02 Mar 2020 H1 U6 Apache-2.0 No Details →
v7.0.0-alpha2.0.20200302043353-755227da8501+incompatible 02 Mar 2020 H1 U6 Apache-2.0 No Details →
v7.6.2-0.20200229020950-32beaa60fd50+incompatible 29 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200229002243-eadcac8483e0 29 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200228215210-31b9426ec2fc 28 Feb 2020 H1 U6 Apache-2.0 No Details →
v7.2.2-0.20200228204040-3ff472dbe584+incompatible 28 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200228192507-fa289ce5e4e1 28 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200228184302-c1c49432bdc5 28 Feb 2020 H1 U6 Apache-2.0 No Details →
v7.6.1+incompatible 28 Feb 2020 H1 U6 Apache-2.0 No Details →
v7.3.3-0.20200228183604-ef0e026039a6+incompatible 28 Feb 2020 H1 U6 Apache-2.0 No Details →
v7.0.0-alpha2.0.20200228141932-96bebe4c0563+incompatible 28 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200228030509-31800af77774 28 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227220536-96100df8bec0 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227212718-4caba2d48350 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227203937-bb1bcb845193 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227195028-6af4783d7d0b 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227190443-8dfaebd3950f 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227170546-dd413819ab97 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227153618-1e0c81887be7 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227140719-3a764e634cf1 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227095218-6816bb106591 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227093319-fe9a489b2427 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227084506-5aab57309738 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200227043025-dfda08fd83b3 27 Feb 2020 H1 U6 Apache-2.0 No Details →
v0.0.0-20200226224249-90aa71961c69 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226212403-7e7bc2e6b1f1 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226210106-6292bf77a88a 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226192719-695b16749317 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226183450-4bb8fa33034f 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226162610-e3a9d83e1e4a 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226155527-ed693e936323 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226154203-4949cd36d4b4 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226103842-e06bbd2955d1 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226100307-236f0cf7ed78 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226095147-ae34415c2057 26 Feb 2020 H1 U6 — No Details →
v0.0.0-20200226034534-65b31bd54984 26 Feb 2020 H1 U6 — No Details →
v7.0.0-alpha2.0.20200225195151-6cc308d8728a+incompatible 25 Feb 2020 H1 U6 — No Details →
v7.6.1-0.20200225164136-184688adcb6d+incompatible 25 Feb 2020 H1 U6 — No Details →
v7.0.0-alpha2.0.20200225144351-7ab6d23b0399+incompatible 25 Feb 2020 H1 U6 — No Details →
v7.0.0-alpha2.0.20200225074450-9c8d5c7ac2df+incompatible 25 Feb 2020 H1 U6 — No Details →
v6.8.7+incompatible 24 Feb 2020 H1 U6 — No Details →
v7.0.0-alpha2.0.20200224095451-b0c600a28dbc+incompatible 24 Feb 2020 H1 U6 — No Details →
v0.0.0-20200221142659-218c330c1184 21 Feb 2020 H1 U6 — No Details →
v7.0.0-alpha2.0.20200221142659-218c330c1184+incompatible 21 Feb 2020 H1 U6 — No Details →

The newest 120 of 803 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2022 2
  • 2025 1
  • 2026 5

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 6 of the 8 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/elastic/beats

The 5 most severe of 8 vulnerabilities recorded for this package

Search all 8 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2017-11480: Denial of Service in Packetbeat 7.5 high 5.6.4 15 Feb 2022
CVE-2025-68388: Elasticsearch Packetbeat Excessive Memory and CPU Allocation via Malicious IPv4 Fragments 7.5 high 8.19.9 19 Dec 2025
CVE-2017-11480: Denial of service in github.com/elastic/beats N/A unrated 6.1.0+incompatible 15 Feb 2022
CVE-2025-68383: Buffer Overflow Vulnerability in github.com/elastic/beats N/A unrated No fix published 23 Jan 2026
CVE-2025-68388: Elasticsearch Packetbeat Excessive Memory and CPU Allocation via Malicious IPv4 Fragments N/A unrated No fix published 23 Jan 2026

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/elastic/beats

Is github.com/elastic/beats safe to use?

Vulert records 8 vulnerabilities for github.com/elastic/beats in Go: 0 critical, 2 high, 0 medium and 0 low, plus 6 not yet rated. 5 of them have no published fix yet, so those are the ones to avoid or mitigate.

What is github.com/elastic/beats's Vulert package health score?

Vulert scores github.com/elastic/beats 50/100, which reads as usable, but worth attention. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15). The current release has a vulnerability with no published fix, which caps this score.

Is the latest version of github.com/elastic/beats affected?

Yes. v7.6.2+incompatible, the version you would install today, has 7 known vulnerabilities, and 5 has no published fix yet. Use an earlier unaffected release, or the workaround each vulnerability lists.

Which version of github.com/elastic/beats should I use?

v7.6.2+incompatible is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/elastic/beats have?

8 vulnerabilities are recorded for github.com/elastic/beats in the Go ecosystem: 0 critical, 2 high, 0 medium and 0 low, plus 6 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/elastic/beats vulnerabilities disclosed?

6 vulnerabilities were recorded for github.com/elastic/beats in the last 12 months, and the oldest entry in this database dates to 15 Feb 2022. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/elastic/beats are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/elastic/beats for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/elastic/beats version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.