kibana

Kibana is an open source (Apache Licensed), browser based analytics and search dashboard for Elasticsearch. Kibana is a snap to setup and start using. Kibana strives to be easy to get started with, while also being flexible and powerful, just like Elastic

Latest 5.1.1

NPM

20%

Total Score

Maintainer Stability

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecation

The package is deprecated at package scope, with the publisher stating it is unusable for creating plugins or integrating Kibana. This directly makes the release unfit despite healthy repository activity.

Release history

This package has only one release, on June 6, 2017, with no releases in the last 12 months. That leaves this dependency as an isolated, obsolete release rather than a maintained registry line.

Workflow audit

The audit found no untrusted checkouts or script injections, and most action references are pinned; however, only 30 of 57 workflows were analyzed and high-confidence ad hoc package installation findings remain. These are secondary hygiene concerns for the repository, not the main release decision.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-111811 kibana is vulnerable to Incorrect Authorization in versions 8.0.0 - 8.19.20, 9.0.0 - 9.4.5 and 9.5.0 - 9.5.1.	8.0.0 - 8.19.209.0.0 - 9.4.59.5.0 - 9.5.1	Medium
AIKIDO-2026-10278 kibana is vulnerable to Improper Validation of Specified Quantity in Input in versions 8.18.0 - 8.19.11, 9.0.0 - 9.2.5 and 9.3.0 - 9.3.0.	8.18.0 - 8.19.119.0.0 - 9.2.59.3.0 - 9.3.0	Medium
CVE-2021-37939 kibana is vulnerable to Cleartext Transmission of Sensitive Information in versions 7.8.0 - 7.15.1.	7.8.0 - 7.15.1	Low