AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

AWSAWS-2026-102

Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards

AWS

CVE-2026-84942 · Published Oct 25, 2026

High8.7
No fix yet
AWS advisory

Read this article

Affected versions

The source does not list versions here. See the source advisory for affected products and fixes.

Changes since it was listed

SeveritySep 28Severity: Unrated to High
Details and references
Severity from
NVD

More AWS advisories

All AWS
Medium 5.9Oct 25Denial of service in the event stream header decoder in AWS SDK for Go v2CVE-2026-89090no fix yetMedium 5.9Oct 25XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePluginCVE-2026-18061no fix yetCritical 9.9Oct 25Server-side request forgery in the Session Manager port forwarding functionality in AWS...CVE-2026-89049no fix yetHigh 7.1Oct 25Issue with projen - Path traversal and OS command injectionCVE-2026-89065no fix yetCritical 9.1Oct 25Integer overflow in tensor buffer validation in Deep Java LibraryCVE-2026-85228no fix yetMedium 6.8Oct 25eMudhra intermediate CA key recovery in AWS trust bundlesCVE-2026-111943no fix yet