Security vulnerability affects the sonarqube package. Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query.