Root has patched CVE-2025-37731 in the io.root.org.elasticsearch:elasticsearch package for Root:Maven. Multiple fixed versions available.
{ "distro_version": "", "distro": "maven", "source": "Root" }
3.0
"9.1.3"
"https://api.root.io/external/osv/ROOT-APP-MAVEN-CVE-2025-37731.json"
"root.io.2"
[ "9.1.3-root.io.1", "9.2.0-root.io.1", "9.1.3-root.io.2" ]
true