{"id":"CVE-2022-41917","summary":"Incorrect Error Handling Allowed Partial File Reads Over REST API in OpenSearch","details":"OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana. OpenSearch allows users to specify a local file when defining text analyzers to process data for text analysis. An issue in the implementation of this feature allows certain specially crafted queries to return a response containing the first line of text from arbitrary files. The list of potentially impacted files is limited to text files with read permissions allowed in the Java Security Manager policy configuration. OpenSearch version 1.3.7 and 2.4.0 contain a fix for this issue. Users are advised to upgrade. There are no known workarounds for this issue.","aliases":["GHSA-w3rx-m34v-wrqx"],"modified":"2026-08-12T13:33:26.865029Z","published":"2022-11-15T00:00:00Z","database_specific":{"cna_assigner":"GitHub_M","cwe_ids":["CWE-200"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41917.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41917.json"},{"type":"ADVISORY","url":"https://github.com/opensearch-project/OpenSearch/security/advisories/GHSA-w3rx-m34v-wrqx"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41917"},{"type":"FIX","url":"https://github.com/opensearch-project/OpenSearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/opensearch-project/anomaly-detection","events":[{"introduced":"502c96e54fae1cec9fee1fafd77ad92fde9d2459"},{"fixed":"8e430e3b0696b3ae24a21eac953e870d935f5226"},{"introduced":"ce81e915882980d819780c83d8f767ca295fbbcb"},{"fixed":"1bf862b9bbd72de150b62356e95b8ee6e9f11811"}],"database_specific":{"cpe":"cpe:2.3:a:amazon:opensearch:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.0"},{"fixed":"1.3.7"},{"introduced":"2.0.0"},{"fixed":"2.4.0"}],"source":"CPE_RANGE"}},{"type":"GIT","repo":"https://github.com/opensearch-project/opensearch","events":[{"introduced":"34550c5b17124ddc59458ef774f6b43a086522e3"},{"fixed":"db18a0d5a08b669fb900c00d81462e221f4438ee"},{"introduced":"bae3b4e4178c20ac24fece8e82099abe3b2630d0"},{"fixed":"744ca260b892d119be8164f48d92b8810bd7801c"},{"fixed":"6d20423f5920745463b1abc5f1daf6a786c41aa0"}],"database_specific":{"cpe":"cpe:2.3:a:amazon:opensearch:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.0"},{"fixed":"1.3.7"},{"introduced":"2.0.0"},{"fixed":"2.4.0"}],"source":["CPE_RANGE","REFERENCES"]}},{"type":"GIT","repo":"https://github.com/opensearch-project/security","events":[{"introduced":"cd6df074a44b5ebc1c22940e6d2d149f162f475c"},{"fixed":"aea96f2a966b566f1bffb36fbc005fb40e73be65"},{"introduced":"5e6457703a6609c556f357aafdb116f4a2f30c05"},{"fixed":"bca461296d1c54f49e4d139316c855f9ca37be26"}],"database_specific":{"cpe":"cpe:2.3:a:amazon:opensearch:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.0"},{"fixed":"1.3.7"},{"introduced":"2.0.0"},{"fixed":"2.4.0"}],"source":"CPE_RANGE"}}],"database_specific":{"vanir_signatures_modified":"2026-08-12T13:33:26Z","vanir_signatures":[{"deprecated":false,"digest":{"length":417,"function_hash":"176974878022512646138680582436915705296"},"id":"CVE-2022-41917-05d9bd6d","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/StemmerOverrideTokenFilterFactory.java","function":"StemmerOverrideTokenFilterFactory"}},{"deprecated":false,"digest":{"line_hashes":["190802608251876723695708323815294798331","159406922189635889326075075414716807852","164487096438305919280300123055628806148","258208411350990867880503156928978156126","182745036320457048373697753478831981211","17165779382262712744817156828346306604","330447875107470999044063650182518584429","15026532455737383454346910345973196471","126453835876486614891207840059575025646","176032099326614279352436648928177379106","187664735698750655791313124692193036867","308083681216149547805348768138620704794","245688700287395083048807384280175191088","11715067545084007430906719122946934852","83266720936271841411945279822828016372","26454332986823529055480486263394149009","97254773761840406105600028925782585928","130023236597886479109613843791183799228","210807043238514916726357204964941549453","92319298434375625179872500794115071100","318310596345242875942157043850083316875"],"threshold":0.9},"id":"CVE-2022-41917-0622182d","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/main/java/org/opensearch/security/securityconf/ConfigModelV7.java"}},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"function":"parseRules","file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/MappingCharFilterFactory.java"},"deprecated":false,"digest":{"function_hash":"234655534862586210842182174774161389895","length":494},"id":"CVE-2022-41917-09cbd489","signature_type":"Function"},{"target":{"file":"server/src/main/java/org/opensearch/index/analysis/Analysis.java","function":"getWordList"},"deprecated":false,"digest":{"function_hash":"88126634126320620157864488098999118765","length":799},"id":"CVE-2022-41917-0e9ff584","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0"},{"digest":{"function_hash":"247457051934937661305705281559170062755","length":610},"id":"CVE-2022-41917-116240ff","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/test/java/org/opensearch/indices/analyze/HunspellServiceTests.java","function":"testDicWithTwoAffs"},"deprecated":false},{"target":{"file":"src/test/java/org/opensearch/security/IndexTemplateClusterPermissionsCheckTest.java","function":"testPutIndexTemplateByNonPrivilegedUser"},"deprecated":false,"digest":{"function_hash":"69639218466026152453728481961233906034","length":333},"id":"CVE-2022-41917-14d12a58","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26"},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"plugins/analysis-nori/src/main/java/org/opensearch/index/analysis/NoriTokenizerFactory.java"},"deprecated":false,"digest":{"line_hashes":["111342965222190887246398360631534306301","314213417521411404117177557308137211289","94106936272375101136004676589287573319","231901020282913530368277983952291463318","142180796652682541941126198183161634853","127519493833669553035969477326873581492","162865617468730359127434515065866103672","287509750964337186302990266155937830463","49210167236648198140836014473033784339","3708795397449316613827980399117983365","91870396507055745819552458070975730980","47729377726454324996260270189455883226","236118697461949034406252871206326730742"],"threshold":0.9},"id":"CVE-2022-41917-19116d78","signature_type":"Line"},{"source":"https://github.com/opensearch-project/anomaly-detection/commit/1bf862b9bbd72de150b62356e95b8ee6e9f11811","target":{"file":"src/test/java/org/opensearch/ad/ml/CheckpointDaoTests.java"},"deprecated":false,"digest":{"line_hashes":["186448465345107317120688004659290159003","22946908560712140361774087873459568010","255155089113029079579388736432658333159","172301413714983972854646049536311874344","66274365401751312851229191492631401282","190717640207533214482700186734970863532","277532028931388571807627119218031304638","113828777195841737102929533843412269892","118321323994054372518871354414733710278","123817673483680696250066798567411253435","49302787141663883651866020706607074274","147763545643897575562657540161532671485","67559209370179240323982977893789713474","222159292968253673499813517540166457185","49748764582509607740820379425900501869","182919545648030101412278232884486691651"],"threshold":0.9},"id":"CVE-2022-41917-1e2c3b55","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/test/java/org/opensearch/analysis/common/StemmerOverrideTokenFilterFactoryTests.java"},"deprecated":false,"digest":{"line_hashes":["238245906509329349723715603839852603215","17028230288346072987925560726285924699","240424514732131381437143796403160248499","160903698682844821695177855773641199176","124855058070437399375106606500670744982","154899492960376457290749091473041394819","257191719086897248346711333584707187684","253644864609314941455621252531079816327","89513911908704162676994613115481800290","29482078929401174161431494380169684750","215386148324369482393782202969698619728","192378398424795873591350786179492768348","40430807232335271833546887053579071233","334901991776092909769489948295498505946"],"threshold":0.9},"id":"CVE-2022-41917-22e0c3ac","signature_type":"Line"},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/test/java/org/opensearch/index/analysis/AnalysisTests.java","function":"testParseFalseEncodedFile"},"deprecated":false,"digest":{"function_hash":"115855828352139779029742346715749052541","length":879},"id":"CVE-2022-41917-28882074","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"292191050793919971982400736026026241825","length":683},"id":"CVE-2022-41917-29221d0d","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/securityconf/impl/v7/IndexPatternTests.java","function":"testExactName"}},{"digest":{"function_hash":"42028553468816119098304692570194140072","length":2007},"id":"CVE-2022-41917-3126e37c","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/DataStreamIntegrationTests.java","function":"testBackingIndicesOfDataStream"},"deprecated":false},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"function":"getReaderFromFile","file":"server/src/main/java/org/opensearch/index/analysis/Analysis.java"},"deprecated":false,"digest":{"function_hash":"120945670448460790037195865160739786898","length":713},"id":"CVE-2022-41917-3a9154a5","signature_type":"Function"},{"target":{"file":"plugins/analysis-nori/src/main/java/org/opensearch/index/analysis/NoriTokenizerFactory.java","function":"getUserDictionary"},"deprecated":false,"digest":{"function_hash":"171957943375556149250508895480292170947","length":800},"id":"CVE-2022-41917-3b720938","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0"},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/test/java/org/opensearch/index/analysis/AnalysisTests.java","function":"testParseWordList"},"deprecated":false,"digest":{"function_hash":"290153847048291691121939207496437242561","length":640},"id":"CVE-2022-41917-3dae37b8","signature_type":"Function"},{"digest":{"threshold":0.9,"line_hashes":["37061934387948239366692544719229096534","127612487483791813091991089876235373158","36321218648973790745587000600036981490","109735325103922640500952539800260588793","298683285382112321220902922421163838972","240538298066663835178827037313565865845","302531972851800373487841946150445044118","131086110612677416770604764193390665887","12062320110023806207747479491905466836","123455177284972247484902489288137370960","183853878965393024253430573682149572872","161242952588842604247650657762916286426","143970754438833278316735303869965328868","47566037716771651447136543167737028235","323847966207640075598835552391836471538","22085988022948594145128110141525536879","14328548511314622699303219089354309388","165602267832144671046779749087407243225","329496666953436727049301276913781823715","203231898793199149841494574283984812821","315647487975222571426383376883320167592","161242952588842604247650657762916286426","143970754438833278316735303869965328868","157876672630112024051573293995766650108","120693751829003984136755719797054131840","189102433056183040316828391935494322964","122264963247253988297646500274278089542","72356859065838406558285496245082700409","195665498930467882486035715066031425588","268800007147529371213368512355538191778","300078071677405415754812732618047365433","261759022143432737711798818070548008091","281675560381097858825013703378804411489","4637478246387709906002580227878726881","46176199648260566777763042262214016383","304436143772479784620097084860578271698","220384884766955898753250613997706945438","236729849018724244947664421848115481538","98883658541032263843725713891809812321","35499668853966470104479542735550005340"]},"id":"CVE-2022-41917-451788d9","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/test/java/org/opensearch/index/analysis/AnalysisTests.java"},"deprecated":false},{"target":{"file":"src/test/java/org/opensearch/ad/ml/CheckpointDaoTests.java","function":"testDeserializeRCFModelPreINIT"},"deprecated":false,"digest":{"function_hash":"295837699587208008633303767026374781651","length":671},"id":"CVE-2022-41917-4563e230","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/anomaly-detection/commit/1bf862b9bbd72de150b62356e95b8ee6e9f11811"},{"deprecated":false,"digest":{"line_hashes":["337821943607884718980452659685528701204","67191872127043099132258444719078617037","63006482482982091652990119475605508561","83331883392929994829512273928432570133","176118888984173788182812449208802022054","241648534402091179100818036210088933165","116340188457432394783552900946375185345","77013053618638369785840249788436408961","301350169197435810502204324930120037478","335601637235022838482248156221428411199","293460731607764669596222168145735287328","59553097003265650940303961354436638457","31857667226584150408061553680393776853","241648534402091179100818036210088933165","116340188457432394783552900946375185345","336217410529803106497308388795854054548","18881345243492272406900253402779917897","319102887999780372378638826515811820598","24180246899425561157268646521432359175","291888254206080354166150691576664889664","166231027250654263840814759471300605043","121780149104149545242255340641482989207","334273751201741764029112690256834324253","283658829666879120251365614861630876250","283426502094342689667712021711664278798","148187277847259279314034420529149718087","295969006678731434423048105450779667338","24363717504739476079761615660374335845","74037839276126673066563975321181321580","82181966604903415269491430497116992023","148876534904636559950672126720368763642","62494087033143423537386841888166257671","102460624254822870863044531768950552723","94734569692399912338025076943060097246","289299529954936096466336318947935218032","37617140684465608575215372628899118817","157840776341387863837567130103337397591","159709249847975097591092559366113646247","25633527858662141510583786564017553840","148187277847259279314034420529149718087","106382907464109697012837538732745198013","23024671739418634230097975022769456774","238297166626815656275027368843847093431","323799062011611067023954859620693380059","93483006094917618863886453929917042161","225653984646749616545553751711661899161","155469146650118624083371635112921719001","176048929374105487295123438466638738123","121917565465983165506608243880256882219","95014843800091961592270914521628273087","279468921564123468284645083004648545638","141766389755956915823986737878147858634","54624486682803109227916926808312146016"],"threshold":0.9},"id":"CVE-2022-41917-4e6ed3c9","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/securityconf/impl/v7/IndexPatternTests.java"}},{"deprecated":false,"digest":{"function_hash":"203160682539939050573782427771993108387","length":590},"id":"CVE-2022-41917-541a2634","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"function":"getRulesFromSettings","file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/SynonymTokenFilterFactory.java"}},{"id":"CVE-2022-41917-54f08af0","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/main/java/org/opensearch/indices/analysis/HunspellService.java"},"deprecated":false,"digest":{"line_hashes":["157469229249374175865480222349086865220","324227736695134123109138603874363705876","101539224635223024825307862886711495013","270995387001976666137375923305495243275"],"threshold":0.9}},{"id":"CVE-2022-41917-57d6ebe2","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/HyphenationCompoundWordTokenFilterFactory.java"},"deprecated":false,"digest":{"line_hashes":["244091166324835402730626674766471783718","15956693130578657517637951636896435362","277096904657760799872276582338572885934","169700062384514619006738139820813612897","316973969822417361830246948232985561303","289180307723053066888534871769675104521","64704788727943400286202823540335161605","247574435979821841357687870733583526485","254651168105996676658143053295484550090","227091858776666336804583974928977129042","255910788080936418650856752325365016718","10360570338240430743708066078273171880","139103498292068076312022285680664235446","120141493076481547090857358779093233831","237124543231066675957446425160032440226","308990146627254914227364106022038418452"],"threshold":0.9}},{"deprecated":false,"digest":{"length":654,"function_hash":"239744325834366404844052919760374117565"},"id":"CVE-2022-41917-5c573b56","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/securityconf/impl/v7/IndexPatternTests.java","function":"testExactNameWithNoMatches"}},{"id":"CVE-2022-41917-6ccc4935","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"plugins/analysis-icu/src/main/java/org/opensearch/index/analysis/IcuCollationTokenFilterFactory.java"},"deprecated":false,"digest":{"line_hashes":["8637334676429114486231407934531552607","79954923989083911961445750088139159465","213556183044757006704974324218023505887","117633853393980035345904820498679744693","98691972171068332028298947727843974787","37359668462590302089479088823781144199","132296967848889975035524774563608944213","162883695896715380259195678011393960054","155223959041936722886775148849879939459"],"threshold":0.9}},{"deprecated":false,"digest":{"function_hash":"255065948523695992490388225525586125987","length":730},"id":"CVE-2022-41917-6e060877","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/securityconf/impl/v7/IndexPatternTests.java","function":"testMultipleConcreteIndices"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/main/java/org/opensearch/indices/analysis/HunspellService.java","function":"HunspellService"},"deprecated":false,"digest":{"function_hash":"163980734433690175285726516877682400046","length":536},"id":"CVE-2022-41917-7069b718"},{"target":{"file":"plugins/analysis-icu/src/main/java/org/opensearch/index/analysis/IcuCollationTokenFilterFactory.java","function":"IcuCollationTokenFilterFactory"},"deprecated":false,"digest":{"function_hash":"325494187407901681186669351684813770066","length":2934},"id":"CVE-2022-41917-711b2069","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0"},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/744ca260b892d119be8164f48d92b8810bd7801c","target":{"file":"server/src/main/java/org/opensearch/index/mapper/AbstractPointGeometryFieldMapper.java"},"deprecated":false,"digest":{"line_hashes":["17048627438651915533651276816066902179","149934693698988820616703394443513603029","146006305977508471690722198244677831683","240788330656112570864437071551249202163","152711017821107095246159710284433270316","31568332359611237168031862415414657238","270757614022594935714794753590482693846","147269456921227182556343515014686265985","28069109890100354480759383087192602283","169803860550469453098135583702200124325","304876052520787136705241555141933591828","26361391883713761824559006177780922007","34615098146099423752585691879625868545","138070543556261093825750031169359055538","39469342667864200491547007218788408392","50187936608899266810208887845122098627","59534714994198773360918658895498455238","23915349231978591387591152578268158566","280377130898672602482385272265613631449","67634621076812657446984530232990775724","177084852865742895149805802473831656081","278606514847167371652359529281480540325","209826223393783303436874919998024456803","133045506598400400252127350349703619132","122345375850081149632681595065651079699","72177723099378191855607625409385513863","33402974758347124635599450191903132369","207937607897238205511138022631175747841","34883721161956316783646418829305407740","194391426585217133077138667830773754965","194081300367898935646450443194943641754","288409596071384630216693843562070203379","216086512715070672518706067905168842212","309673774960644042388859631219576171583","159729888933527805760530388845727047285","325009052105012417984003912243220128637","314779181712407588552528523415963479862","274923833791052264272509837526384913643","8815297127135672680576973535293465689","132761030311568202745053924792387187089","202195023701641583966594578788921008128","61531972601589059403337303544233949482","102592365368395643746533626616208175397","212262579722479814407692495225684332863","39539486003013522049608937787611466393","246476676816137247473831962818237448026","335009558084391116747953582065464974864","123133674041330844459310121585741650810","10845464845800182800930478827899156756","82354483932027163043918231973686500309","100381715971144982694976537281485979895","155352436137415831665578477263618609601","95491293699046982585770086414228047956","188891531721186369487323952309948663828","279137084820016730480753291199418815614","164496307841070179657773006934556754404","125235467816935585620280476789153445936","106976968521014027950565027855516291338","294783748254981201410023940614038535312","197891360471463700242782738017267289629","215843620904314785241951087549239462918","283076657572558445909752483752179632622","204906379781621035441833925514356134887","14973599023740517374568784902304568022","310471899262468619281775099588120822972","116273437404207121054980488101993981544","251627273515457659877272627416849203930","173908992094598158569317543287135602761","83149265597370038969245635014808694140","193586799978581750804093513761513619606"],"threshold":0.9},"id":"CVE-2022-41917-7e5837e2","signature_type":"Line"},{"id":"CVE-2022-41917-7e7401a4","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/main/java/org/opensearch/security/securityconf/ConfigModelV7.java","function":"getResolvedIndexPattern"},"deprecated":false,"digest":{"function_hash":"294108489770333174010132037324844163732","length":1027}},{"source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/test/java/org/opensearch/analysis/common/SynonymsAnalysisTests.java"},"deprecated":false,"digest":{"line_hashes":["238110053788725186697119382936745661564","17300697542861091699654502090529740781","54840397292105703219957501400086540123","76027113146976557928260435841363220175","238110053788725186697119382936745661564","17300697542861091699654502090529740781","54840397292105703219957501400086540123","210647803597361337385288974375727318924"],"threshold":0.9},"id":"CVE-2022-41917-7eceb2f5","signature_type":"Line","signature_version":"v1"},{"digest":{"function_hash":"270836075558753518365152013180943528273","length":1006},"id":"CVE-2022-41917-810cd39f","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/WordDelimiterTokenFilterFactory.java","function":"parseTypes"},"deprecated":false},{"deprecated":false,"digest":{"line_hashes":["318585765218046772063895977455970478002","91872981651639375710132422364773390418","171718711303146851909307777894282944715","295657836886718122990247612433269563922","315048917449121983361318385149163243196","99366308205554515514950198824610075056","64913146282092442741085040720672439963","86547588149424788970287961051867558946","29788355403474697953800707495961338892","214843591462688544502050119427480421499","162114699226006645023721870117187065478","522801432230570628533889458668094639","164703306226308999267278302480693223661","236964105288140278168152392302847049126","195931617870192447420942566492261615483","99357932783270092900857949857048295563","142948989365586264067257903933526014006","675976327017233430198593901801508769","123368313519561905857170691573816339993","203717848879959621783603830316651910960","251153800209764319864815589809567946762"],"threshold":0.9},"id":"CVE-2022-41917-8a03181e","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/WordDelimiterTokenFilterFactory.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"function":"WordDelimiterGraphTokenFilterFactory","file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/WordDelimiterGraphTokenFilterFactory.java"},"deprecated":false,"digest":{"function_hash":"6172203570953011563483331214116991475","length":1354},"id":"CVE-2022-41917-8a7ecdf9"},{"source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/DataStreamIntegrationTests.java"},"deprecated":false,"digest":{"line_hashes":["304839939921860648025146931493383880770","114824905897582127923213642326210500463","279282111741171071780837385092493668260","230484571854701085785817296781336459921","163031644383687259557961007999565872328","210306569907450714725336597611909073798","322967534684329559786359980029194356725","99764264942043381494496359371697479573","266456712856741126297076607667905475792","213028920204091298750111556879529391686","83265420109879833198405307683372454834","67429226484931028311238673280342925629","91105338395687701043839099980540564837","6450162401299574315445497086149522729"],"threshold":0.9},"id":"CVE-2022-41917-906430fe","signature_type":"Line","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/744ca260b892d119be8164f48d92b8810bd7801c","target":{"file":"server/src/main/java/org/opensearch/index/mapper/AbstractPointGeometryFieldMapper.java","function":"reconstructArrayXContent"},"deprecated":false,"digest":{"function_hash":"13364759679334999557378171629924440638","length":471},"id":"CVE-2022-41917-96751c7d","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"317354141074329335650305282285759968709","length":240},"id":"CVE-2022-41917-9a1aaf75","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/main/java/org/opensearch/index/analysis/Analysis.java","function":"getWordSet"}},{"target":{"file":"plugins/analysis-nori/src/main/java/org/opensearch/index/analysis/NoriPartOfSpeechStopFilterFactory.java"},"deprecated":false,"digest":{"line_hashes":["66629474912797236913588760000762272900","226798559644508562663430713761377270021","161839223962818366487362154104748824790","160274042227712890937659836363791240195"],"threshold":0.9},"id":"CVE-2022-41917-9a34bb31","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0"},{"digest":{"threshold":0.9,"line_hashes":["181228663489364133139766858114643120042","120607061120944406346174195761203226835","220893351690889252686119182032197233984","147514276779541550004423516361450761647","286327392011281438875947815267927543967","252379884439394779079312749964476235500","252083029616742640765624727568460147549","309330372637873811250998862772112354067","198549328882045431417545853394385933717","91323175900703052245874480459199492941","4266294739694417502314214728029823242","123808261289335586862046293089276600383","240830173321853121555135313806480264278","152530094272200065833547788212772672479","237757907165532832009739452121569225929","89005493540686198119675041011033458396","199440673260883539461782224826673336263","238763402527332673544259267894829134303","330860716400862088197870346252363622262","69941013223447139940546021431662982399","64919272567014620794142540440118277440","325454549259419460308664519350035465772","164257297216251291884124531689506872016","157185595051339224055634012853274499823","169587942620414669881449215721232269507","122405557187669108552953812622837900902","64025113360216334112307550789518996255","7235158341129684747106987788822314915","71131065915106142768883598879945683497","88664307501058579781955146348592336599","259037845592660136237549331832276205043","7811168865606985719952102379508051271","123868506490275152075557038378270357512","311522163058794236928516589728765190085"]},"id":"CVE-2022-41917-a272a5ad","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"plugins/analysis-kuromoji/src/main/java/org/opensearch/index/analysis/KuromojiTokenizerFactory.java"},"deprecated":false},{"digest":{"length":620,"function_hash":"41170949502944265780084601630085610458"},"id":"CVE-2022-41917-a35fc3b5","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/test/java/org/opensearch/index/analysis/AnalysisTests.java","function":"testParseNonExistingFile"},"deprecated":false},{"deprecated":false,"digest":{"length":131,"function_hash":"335270822789775272669757556458159253031"},"id":"CVE-2022-41917-a3acdf2a","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/main/java/org/opensearch/index/analysis/Analysis.java","function":"getWordList"}},{"digest":{"function_hash":"177015297970552032179796422297282209308","length":1193},"id":"CVE-2022-41917-a5015401","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/securityconf/impl/v7/IndexPatternTests.java","function":"testMultipleConcreteIndicesWithOneAlias"},"deprecated":false},{"digest":{"line_hashes":["157639417100125556875140226556329778119","39332545010403953370335241303781971654","95895900298352061382906362055012717225","107195619093693570336330093161567756532","82797253965665218830239723304419389690","236978715830984851196280058505569856466"],"threshold":0.9},"id":"CVE-2022-41917-a89e203b","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/PitIntegrationTests.java"},"deprecated":false},{"id":"CVE-2022-41917-a9f4437d","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/PitIntegrationTests.java","function":"testDataStreamWithPits"},"deprecated":false,"digest":{"function_hash":"335887108310174375250011577907427146906","length":1514}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"plugins/analysis-kuromoji/src/test/java/org/opensearch/index/analysis/KuromojiAnalysisTests.java","function":"testKuromojiAnalyzerDuplicateUserDictRule"},"deprecated":false,"digest":{"function_hash":"264427143854636905545408192196460743964","length":488},"id":"CVE-2022-41917-b0e2a3bc"},{"target":{"file":"modules/analysis-common/src/test/java/org/opensearch/analysis/common/BaseWordDelimiterTokenFilterFactoryTestCase.java"},"deprecated":false,"digest":{"line_hashes":["222130018292434616747258910815314766206","195883867379742098617099476502653007002"],"threshold":0.9},"id":"CVE-2022-41917-b370635b","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0"},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/SynonymTokenFilterFactory.java","function":"buildSynonyms"},"deprecated":false,"digest":{"function_hash":"234517958295187873297119733708754863503","length":420},"id":"CVE-2022-41917-b55af76a","signature_type":"Function"},{"target":{"function":"createParser","file":"server/src/main/java/org/opensearch/index/mapper/AbstractPointGeometryFieldMapper.java"},"deprecated":false,"digest":{"function_hash":"48399475011060540466766896048124358509","length":247},"id":"CVE-2022-41917-b5d5e397","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/744ca260b892d119be8164f48d92b8810bd7801c"},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/main/java/org/opensearch/index/analysis/Analysis.java","function":"parseWords"},"deprecated":false,"digest":{"function_hash":"85344683432013631753191143608827551910","length":437},"id":"CVE-2022-41917-bc48a228","signature_type":"Function"},{"target":{"file":"server/src/test/java/org/opensearch/indices/analysis/AnalysisModuleTests.java"},"deprecated":false,"digest":{"line_hashes":["257998577119683662836810621513159420317","36877271394219086506199677989276982001","262813357812124768301477651457934553161","81956772421419855772165199603672741799","68220824843538881297650765327994747017","51711104919855979117160388914218313723","17698065129891418664643591170613955965","229725106370564251210560804559804659959","145245705559270952171803431132387768613","151976283975813982836448346494390833489","160789155037978241014427571389817589488","18535596033112031668234058399477940947"],"threshold":0.9},"id":"CVE-2022-41917-bc4954a2","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0"},{"digest":{"line_hashes":["318585765218046772063895977455970478002","91872981651639375710132422364773390418","53616515670617784803198560225645815189","195311782735850586176572569457280811293","34653006751624497139418927519534784465","315388508877765426681873712126295281728","64913146282092442741085040720672439963","86547588149424788970287961051867558946"],"threshold":0.9},"id":"CVE-2022-41917-c01d2597","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/WordDelimiterGraphTokenFilterFactory.java"},"deprecated":false},{"deprecated":false,"digest":{"length":1210,"function_hash":"181574555054423950980053085945659057545"},"id":"CVE-2022-41917-c12d02af","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/WordDelimiterTokenFilterFactory.java","function":"WordDelimiterTokenFilterFactory"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"plugins/analysis-nori/src/main/java/org/opensearch/index/analysis/NoriAnalyzerProvider.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["327670762231415246545252567493607876720","268874903052782436631582438603893547713","4348251768172488732195572753444720174","164753280413885813928531572971674173791"]},"id":"CVE-2022-41917-c361b8e4"},{"deprecated":false,"digest":{"function_hash":"268258379426869773822894507879484586241","length":1569},"id":"CVE-2022-41917-c7031750","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/anomaly-detection/commit/1bf862b9bbd72de150b62356e95b8ee6e9f11811","target":{"file":"src/test/java/org/opensearch/ad/ml/CheckpointDaoTests.java","function":"testDeserializeTRCFModel"}},{"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["244538917492839626145666165830901884934","125346376276314126712025849486967206346","10968483560346819309373249400631244351","276251671523065973409431968296835060734","144679960663738164105022352237423498794","63320660257884002280647035681423017439","84212914011047468447059225150499919912","196297553384945404930699307003145732867","51291681077109089607630147501560797959","113222302783786320452175332009138523226","264893569489192044943487278310438290573","98570773932584790335170968376806370523","215572134523653525335688979511016078700","178778556961898020605780413363282304684","270517651089676730044078639717234601525","86599147180136192752300383940536104569"]},"id":"CVE-2022-41917-ca9d9cea","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/test/java/org/opensearch/indices/analyze/HunspellServiceTests.java"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/securityconf/impl/v7/IndexPatternTests.java","function":"testMultipleConcreteAliasedAndUnresolved"},"deprecated":false,"digest":{"length":1352,"function_hash":"56268870803881870005230508140374584424"},"id":"CVE-2022-41917-cb02482a"},{"deprecated":false,"digest":{"function_hash":"10291138079876447668285408730049818939","length":366},"id":"CVE-2022-41917-cc387bac","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/MappingCharFilterFactory.java","function":"MappingCharFilterFactory"}},{"id":"CVE-2022-41917-cc3d16df","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/test/java/org/opensearch/indices/analyze/HunspellServiceTests.java","function":"testDicWithNoAff"},"deprecated":false,"digest":{"function_hash":"181194592656370600420534244871696967353","length":607}},{"digest":{"function_hash":"194785354979849287922758716804332119705","length":277},"id":"CVE-2022-41917-cca2998f","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/test/java/org/opensearch/analysis/common/StemmerOverrideTokenFilterFactoryTests.java","function":"testRuleError"},"deprecated":false},{"id":"CVE-2022-41917-ccf1c294","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/test/java/org/opensearch/indices/analysis/AnalysisModuleTests.java","function":"testWordListPath"},"deprecated":false,"digest":{"function_hash":"140870604249774573514590178314297760342","length":638}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/744ca260b892d119be8164f48d92b8810bd7801c","target":{"file":"server/src/test/java/org/opensearch/index/mapper/GeoPointFieldMapperTests.java"},"deprecated":false,"digest":{"line_hashes":["170494040449943166722294887993724282923","71503735865927709349329228653077700459","38097828152124527898574682978502692851","2324650910766934694111590988961238676","88112275390130018182485768905379614948","311019332360114647262887612165227593368","217375664822843649988019698342119348462","198806002937892200415775290128948927099"],"threshold":0.9},"id":"CVE-2022-41917-cd4c1c66"},{"target":{"file":"plugins/analysis-kuromoji/src/main/java/org/opensearch/index/analysis/KuromojiPartOfSpeechFilterFactory.java"},"deprecated":false,"digest":{"line_hashes":["196016838179657315346454422535464230920","108837239804918932961168505398978666613","170362648760777844431247065530928839405","252365428599797932584215858621561136198"],"threshold":0.9},"id":"CVE-2022-41917-d2678474","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0"},{"deprecated":false,"digest":{"line_hashes":["318585765218046772063895977455970478002","47673691033201663307914067342749177121","334932541511870558722058879402902228641","307558206968203846931340867633368370050","306220774464390874056220684343678952395","182298979154352079037078441763813289889","92522943732717609344677234464623416095","265100503220412397374177615850489260881","97863098512434523615195173217684649690","157213737198038044825059719249943216784","178076066850434167463438797574098000301","231515088336970329400159570789460343141","112830996870952550358645315179722976526","5782020496576311551152483876650393859","124487769697743828694133343200819768764","127151055475433539532177784235635730808","560705575978279861748595800583303656","240122408266847761345614933354447936305","167380983541086996074551202776460941020","126184081738669766090750882388233775803","278412337723475050986623664072274514378","288330389190911571996404591411074414939","110084707188449532859507421142655845817","256431301565447499710513332339085774517","275012718598147976304242083324984171349","59786142146716680571099249681910721741","9921638432498286661913042690109130495","93627358200757229398886298472967109655","304898491023932109615166868592824437691","134984217934682190305622294275005520399","197027687349788482828725994467591513283","325724182295433926671700333201862438377","304603025378801466386963859914725225726","56911010350691471892011444783052574684","169316340638024193806150459093207412333","158994156285789033616271692636027456356","108587633537507210242609878158511307392"],"threshold":0.9},"id":"CVE-2022-41917-d3f9be8a","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/StemmerOverrideTokenFilterFactory.java"}},{"deprecated":false,"digest":{"function_hash":"243291135274801034348156805059726498849","length":1105},"id":"CVE-2022-41917-d50d1315","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"plugins/analysis-kuromoji/src/main/java/org/opensearch/index/analysis/KuromojiTokenizerFactory.java","function":"getUserDictionary"}},{"deprecated":false,"digest":{"function_hash":"5435587212410307244151779399305191658","length":271},"id":"CVE-2022-41917-d8f3ad35","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"plugins/analysis-nori/src/main/java/org/opensearch/index/analysis/NoriPartOfSpeechStopFilterFactory.java","function":"NoriPartOfSpeechStopFilterFactory"}},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/StemmerOverrideTokenFilterFactory.java","function":"parseRules"},"deprecated":false,"digest":{"function_hash":"287782956828317165168223137021813033941","length":638},"id":"CVE-2022-41917-db72441f","signature_type":"Function"},{"source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/test/java/org/opensearch/indices/analysis/AnalysisModuleTests.java","function":"generateWordList"},"deprecated":false,"digest":{"function_hash":"291738432609685861645254956810730266200","length":298},"id":"CVE-2022-41917-dbb6b02a","signature_type":"Function","signature_version":"v1"},{"deprecated":false,"digest":{"function_hash":"248921983859889504221658662936103872006","length":417},"id":"CVE-2022-41917-e2f6be2f","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/744ca260b892d119be8164f48d92b8810bd7801c","target":{"file":"server/src/test/java/org/opensearch/index/mapper/GeoPointFieldMapperTests.java","function":"testLatLonInArrayMoreThanThreeValues"}},{"id":"CVE-2022-41917-e3279d83","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/main/java/org/opensearch/index/analysis/Analysis.java","function":"loadWordList"},"deprecated":false,"digest":{"function_hash":"119643372986481659262220042905635960664","length":429}},{"source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"server/src/main/java/org/opensearch/index/analysis/Analysis.java"},"deprecated":false,"digest":{"line_hashes":["80362560046818817681976211717162525790","179043312201370583531369149258621898823","294572179272897995055765395345343224895","33545480893440720403699933128132167102","47043733513439369906111940074382557248","317907130767011211755637535858996435332","228035554644810353351212160490500965417","222768351409467824729152925178026746845","56527219905721122310448821141510822572","62456283456865633219639985509781561693","285082093058850567881433821628692488298","112455153530915588699157285789934661388","330636167701810382609793870206048025720","255472994429035547880491036875470781114","326771805047655648356538866452546274007","126356250259452193646645474302815057492","13611692881289214999827533718223943476","239137122963872642311529913524015502079","249696007418127881329173956060967260796","318205029799773837551534496359426031489","22697795473482504068321346859638317096","175935889108291852289834544734445941059","217613715393096293330379136028726144884","143174567773678891966693597178007589271","307801456391434816924602023775579986979","154273051110214248392384652016503944477","14942876433603290327637323884582609627","86940383469074757299745244828289098987","73445282524809989291347497624625382154","28078600928958604671578016941475443278","34135998326826544494875022079776366570","196171420090262790578027730187058865426","333410001624349834884369018742485436583","311400887724936962611674412533525669875","80730730399221896277464096818996899688","259940654510208893232212236585313983243","195265833533008725661641545211370660847","49525932101581162411130806103079238843","333694982964705384959138074041970380968","279261399421818503020438463907285961229","195364417162771409361242683070962135291","233906325713435133129668291556149999796","91184863584581549135717943806355221905","139047903862287521640647437536004617905","86798575101810463181483079917928897828","325473551644423065830272112996512491887","120654778092441924018972828145032836985","99677422450655213842742778991478936042","240252272456984395687357777441563045160","270790771839388014205243317141767039486","61258705926422271059480534513557859683","101257493722867924078398830531498808087","86035585892615254442370862101805962947","84372418188449787418138855105598779784","269251838732397127110907250588386703170","205971861604704075990292806875386503603","69599449240323106215987124941249028174","90477121491718072060675061028638773452","159452224587184938778937548681112152248","305068579504350499143502782577538378679","139649495802788409272236715812576873911","219542903012019254892754952405685101334","72773839262701109989961883687563204904","48032817385260973378871843200713594071","29877814425642817225395232250574599573","136070886474789055872915946713751611499","51481460655234872311110555980251738467","145365678351154226940960234229319815806","78995963205088081283785870057431617957","139047903862287521640647437536004617905","57652799335204764187941290873590067589","177757777123348616456221059969676340297","50942405802198678674112263160890833701","267087837899737393019049493887439051053","113692885183379875599924854926081740862"],"threshold":0.9},"id":"CVE-2022-41917-e4268a52","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2022-41917-e5921c96","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/security/commit/bca461296d1c54f49e4d139316c855f9ca37be26","target":{"file":"src/test/java/org/opensearch/security/IndexTemplateClusterPermissionsCheckTest.java"},"deprecated":false,"digest":{"line_hashes":["75923945005803513679238543808349686941","215197920071175680155699009676477820184","249951776961905760540647555739583814865","97768805283861829065334173221268237582","154707291322054563930136312590658826380"],"threshold":0.9}},{"target":{"file":"plugins/analysis-nori/src/main/java/org/opensearch/index/analysis/NoriAnalyzerProvider.java","function":"NoriAnalyzerProvider"},"deprecated":false,"digest":{"function_hash":"279944563276199053002058898520919384786","length":463},"id":"CVE-2022-41917-e73e251d","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0"},{"deprecated":false,"digest":{"line_hashes":["74999161607339369302246486548722013515","331654741017039618897214737826080373175","242400699683402521130385429679470978515","14288849670986151895276425634239014606","48293227543804605485749147679819442287","233564884399080233060973457834074608021","198658597595291339366835687978977130701","134069994519578208471988178467839830807","14691847253493116405349887254614938751","193326693561257596907395285748170354967","286696334717236037067817516725650375639","187446307405698346313631927133908820728","275923403730748353668797899065846350830","144868421321935859159718940492258168481"],"threshold":0.9},"id":"CVE-2022-41917-e7d96ad0","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/anomaly-detection/commit/8e430e3b0696b3ae24a21eac953e870d935f5226","target":{"file":"src/test/java/org/opensearch/ad/e2e/DetectionResultEvalutationIT.java"}},{"source":"https://github.com/opensearch-project/anomaly-detection/commit/8e430e3b0696b3ae24a21eac953e870d935f5226","target":{"file":"src/test/java/org/opensearch/ad/e2e/DetectionResultEvalutationIT.java","function":"testValidationWindowDelayRecommendation"},"deprecated":false,"digest":{"function_hash":"205572322480542887554609209692216585020","length":1389},"id":"CVE-2022-41917-e7efffae","signature_type":"Function","signature_version":"v1"},{"signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"plugins/analysis-kuromoji/src/main/java/org/opensearch/index/analysis/KuromojiPartOfSpeechFilterFactory.java","function":"KuromojiPartOfSpeechFilterFactory"},"deprecated":false,"digest":{"function_hash":"329809226755627842713234130582407298694","length":289},"id":"CVE-2022-41917-eccffc15","signature_type":"Function"},{"deprecated":false,"digest":{"length":581,"function_hash":"243409086512293440872825131937347373953"},"id":"CVE-2022-41917-edf64a8f","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/HyphenationCompoundWordTokenFilterFactory.java","function":"HyphenationCompoundWordTokenFilterFactory"}},{"id":"CVE-2022-41917-efa70921","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"plugins/analysis-kuromoji/src/test/java/org/opensearch/index/analysis/KuromojiAnalysisTests.java"},"deprecated":false,"digest":{"line_hashes":["45524427521153656266812087539124090024","305895016772490157614664675391036720632","100491831666351955224003518950789444916","119955407707916806748813071531146252685","46014241160977908696250747753033182490"],"threshold":0.9}},{"deprecated":false,"digest":{"line_hashes":["290212279850964436139178196181072492877","206741399728692572585325535716832514859","122024277021127815618562158671822081316","139052276641515435948005115122930041881","171343912542226955395081838175827544418","43261003069423255370439518489842889430","42955051301315913586357950656064408388","107021456375131704825231910593115954207","167191313751192407649075490744620617674","51748887795105469088701682308260471609","118998556905014554441940507267394526234","95249738952580145378879193659747768022","255607363004995216054288979187885690085","156726477461983587425125140679469805582","261306802714998143702642683504800006402","209385391801010292032682166160335544891","30379085384155658022957509518944646960","210084436984643448833176391179664323437","222322091716629702104542832924924273131","135531779896187659051710997075267885589","256672461863454709187673146084580627914","50070979997919222697954178774728815172","77684366463649613164958206537408897271","102585244920026671674822306230898250295","198751214385471716382002238803516199082"],"threshold":0.9},"id":"CVE-2022-41917-fa15a1f6","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/MappingCharFilterFactory.java"}},{"deprecated":false,"digest":{"function_hash":"328781368053030034306533204129282601972","length":671},"id":"CVE-2022-41917-fe41aeee","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/anomaly-detection/commit/1bf862b9bbd72de150b62356e95b8ee6e9f11811","target":{"file":"src/test/java/org/opensearch/ad/ml/CheckpointDaoTests.java","function":"testDeserializeRCFModelPostINIT"}},{"id":"CVE-2022-41917-ff15f2a0","signature_type":"Line","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/6d20423f5920745463b1abc5f1daf6a786c41aa0","target":{"file":"modules/analysis-common/src/main/java/org/opensearch/analysis/common/SynonymTokenFilterFactory.java"},"deprecated":false,"digest":{"line_hashes":["271443702475636854332131117653319444555","128233686025081921735974140011227088370","51748547703938597943592867197037413355","16069582832339860183132799717508944702","249843403332797400713619541878430181464","179884292504253853072991680094853060977","77762023829034628456471819772553680705","337176616589192798881970203557067961702","75984720381926313635087223396378808299","112571358493203014432845650167407713686","28721071181928934832949682269364209287"],"threshold":0.9}},{"digest":{"function_hash":"40675771172524671681349395243778069239","length":998},"id":"CVE-2022-41917-ff70d01f","signature_type":"Function","signature_version":"v1","source":"https://github.com/opensearch-project/opensearch/commit/744ca260b892d119be8164f48d92b8810bd7801c","target":{"file":"server/src/main/java/org/opensearch/index/mapper/AbstractPointGeometryFieldMapper.java","function":"parse"},"deprecated":false}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-41917.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}]}