Security vulnerability affects the sonarqube package. Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure.