From 593c3ee8ccdb0ec738cd718cde5f18f9e6c5be65 Mon Sep 17 00:00:00 2001
From: Thomas Gerbet <thomas@gerbet.me>
Date: Wed, 22 Jul 2026 23:11:48 +0200
Subject: [PATCH] elasticsearch: tag with knownVulnerabililities

Closes https://github.com/NixOS/nixpkgs/issues/544682

(cherry picked from commit b170e54faa77fa54746dff88e5304396575eb408)
---
 pkgs/servers/search/elasticsearch/7.x.nix | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/pkgs/servers/search/elasticsearch/7.x.nix b/pkgs/servers/search/elasticsearch/7.x.nix
index 15c00f4e8794..9fce4d2d7167 100644
--- a/pkgs/servers/search/elasticsearch/7.x.nix
+++ b/pkgs/servers/search/elasticsearch/7.x.nix
@@ -94,5 +94,14 @@ stdenv.mkDerivation rec {
     maintainers = with lib.maintainers; [
       basvandijk
     ];
+    knownVulnerabilities = [
+      "Elasticsearch 7 is EOL since January 15 2026"
+      "CVE-2026-63144"
+      "CVE-2026-56145"
+      "CVE-2026-63263"
+      "CVE-2026-56144"
+      "CVE-2026-63140"
+      "CVE-2026-63136"
+    ];
   };
 }