# Security Advisory: Upgrade to 2.2.0 recommended

**URL:** <https://forum.opensearch.org/t/security-advisory-upgrade-to-2-2-0-recommended/10599>\
**Category:** Announcements\
**Tags:** releases, security-issue\
**Created:** [August 12, 2022, 10:29pm UTC](https://forum.opensearch.org/t/security-advisory-upgrade-to-2-2-0-recommended/10599 "2022-08-12T22:29:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![kris](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/kris/32/2208_2.png) [@kris](https://forum.opensearch.org/u/kris)\
**Post date:** [August 12, 2022, 10:29pm UTC](https://forum.opensearch.org/t/security-advisory-upgrade-to-2-2-0-recommended/10599/1 "2022-08-12T22:29:38Z")

</div>

On August 12 the OpenSearch project published a [security advisory](https://github.com/opensearch-project/security/security/advisories/GHSA-f4qr-f4xx-hjxw) for a vulnerability in the software’s security plugin. The vulnerability allows requests to access sensitive information when the customer has acted to restrict access that specific information. This issue has been fixed in [OpenSearch 2.2.0](https://opensearch.org/blog/releases/2022/08/opensearch-2-2-is-now-available/). Users of 2.0.0 or 2.1.0 versions are encouraged to upgrade to version 2.2.0 to resolve the vulnerability.

---

<div class="post-metadata">

**Author:** ![kris](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/kris/32/2208_2.png) [@kris](https://forum.opensearch.org/u/kris)\
**Post date:** [January 25, 2023, 10:25pm UTC](https://forum.opensearch.org/t/security-advisory-upgrade-to-2-2-0-recommended/10599/2 "2023-01-25T22:25:21Z")

</div>