Search Guard versions before 23.1 had an issue that for aggregations clear text values of anonymised fields were leaked.
https://search-guard.com/cve-advisory/
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-4913
https://docs.search-guard.com/6.x-23/changelog-searchguard-6-x-23_1