Skip to content
Fluent vulnerabilities
Newest
-
fluent fluent-bit
Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler
CVE-2026-61674
Fix available
9.2 Critical
-
fluent fluent-plugin-s3
fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`
CVE-2026-44162
Fix available
2.7 Low
-
fluent fluentd
Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`
CVE-2026-44161
Fix available
7.2 High
-
fluent fluentd
Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`
CVE-2026-44160
Fix available
7.5 High
-
fluent fluentd
Fluentd: Exposure of Sensitive Information via Monitor Agent API
CVE-2026-44025
Fix available
7.5 High
-
fluent fluentd
Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder
CVE-2026-44024
Public exploitFix available
9.8 Critical
-
fluent bit, treasuredata fluent bit +1 more
In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP...
CVE-2024-23722
Public exploitFix available
7.5 High
-
fluent fluentd, fedoraproject fedora +1 more
Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)
CVE-2022-39379
Fix available
EPSS 45.0%
3.1 Low
-
fluent fluentd
ReDoS vulnerability in parser_apache2
CVE-2021-41186
Fix available
5.9 Medium
-
cloud native computing foundation (cncf) fluentd, redhat openstack +1 more
Fluentd Escape Sequence Injection Vulnerability
CVE-2017-10906
Fix available
9.8 Critical