# Vulnerability in High level client fixed in Elasticsearch 7.11.0, when in OpenSearch?

**URL:** <https://forum.opensearch.org/t/vulnerability-in-high-level-client-fixed-in-elasticsearch-7-11-0-when-in-opensearch/6753>\
**Category:** OpenSearch Client Libraries\
**Tags:** opensearch-java\
**Created:** [August 10, 2021, 4:34pm UTC](https://forum.opensearch.org/t/vulnerability-in-high-level-client-fixed-in-elasticsearch-7-11-0-when-in-opensearch/6753 "2021-08-10T16:34:49Z")\
**Posts on this page:** 1\
**Showing post:** 8

<div class="post-metadata">

**Author:** ![nknize](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/nknize/32/1355_2.png) [@nknize](https://forum.opensearch.org/u/nknize)\
**Post date:** [August 12, 2021, 3:19am UTC](https://forum.opensearch.org/t/vulnerability-in-high-level-client-fixed-in-elasticsearch-7-11-0-when-in-opensearch/6753/8 "2021-08-12T03:19:51Z")

</div>

Vulnerability 1: this async search vulnerability is related to ELv2 Elastic licensed code; not OpenSearch. The async search API was licensed ALv2 but it was removed in [PR#10](https://github.com/opensearch-project/OpenSearch/pull/10), because the implementation is licensed ELv2.

Vulnerability 2: this Document and Field Level Security vulnerability is in licensed ELv2 code and was removed (along w/ HLRC) in OpenSearch in [PR#16](https://github.com/opensearch-project/OpenSearch/pull/16)

Vulnerability 3: this Document and Field Level Security vulnerability is in licensed ELv2 code and was removed (along w/ HLRC) in OpenSearch in [PR#16](https://github.com/opensearch-project/OpenSearch/pull/16)

---

_[View the full topic](https://forum.opensearch.org/t/vulnerability-in-high-level-client-fixed-in-elasticsearch-7-11-0-when-in-opensearch/6753)._