OpenSearch Dashboards XSS Vulnerability Requires Urgent Patching

OpenSearch Dashboards has a stored cross-site scripting (XSS) flaw in its Vega expression function that lets authenticated users with dashboard write access inject malicious code affecting other users. This is a serious issue—if you're running v2.0.0 through v3.5.0, you need to upgrade to v2.19.5 or v3.6.0 immediately. AWS Managed and Serverless versions have separate patch schedules, so check your specific deployment.