Treasuredata Fluent Bit vulnerabilities

• fluentbit fluent bit CVE-2025-12978 CVE-2025-12978 Fix available 5.4 MediumNovember 24, 2025
• fluentbit fluent bit CVE-2025-12969 CVE-2025-12969 Fix available 6.5 MediumNovember 24, 2025
• fluentbit fluent bit CVE-2025-12972 CVE-2025-12972 Fix available 5.3 MediumNovember 24, 2025
• fluentbit fluent bit CVE-2025-12977 CVE-2025-12977 Fix available 9.1 CriticalNovember 24, 2025
• fluentbit fluent bit CVE-2025-12970 CVE-2025-12970 Fix available 8.8 HighNovember 24, 2025
• treasuredata fluent bit An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the... CVE-2025-29478 5.5 MediumApril 7, 2025
• treasuredata fluent bit An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the... CVE-2025-29477 5.5 MediumApril 4, 2025
• treasuredata fluent bit An issue was discovered in Fluent Bit 3.1.9. When the OpenTelemetry input plugin is running and... CVE-2024-50609 Fix available 7.5 HighFebruary 18, 2025
• treasuredata fluent bit An issue was discovered in Fluent Bit 3.1.9. When the Prometheus Remote Write input plugin is... CVE-2024-50608 Fix available 7.5 HighFebruary 18, 2025
• fluent bit bit, fluentbit fluent bit +1 more Fluent Bit Memory Corruption Vulnerability CVE-2024-4323 Public exploitFix available EPSS 27.0% 9.8 CriticalMay 20, 2024
• fluent bit, treasuredata fluent bit +1 more In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP... CVE-2024-23722 Public exploitFix available 7.5 HighMarch 26, 2024
• fluentd fluentbit, treasuredata fluent bit +1 more fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia... CVE-2024-26455 Fix available 7.5 HighFebruary 26, 2024
• treasuredata fluent bit An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the... CVE-2021-46879 Fix available 7.8 HighApril 11, 2023
• treasuredata fluent bit An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in... CVE-2021-46878 Fix available 7.8 HighApril 11, 2023
• treasuredata fluent bit Fluent Bit (aka fluent-bit) 1.7.0 through 1.7,4 has a double free in flb_free (called from... CVE-2021-36088 Fix available 9.8 CriticalJuly 1, 2021
• treasuredata fluent bit Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated... CVE-2021-27186 Fix available 7.5 HighFebruary 10, 2021
• treasuredata fluent bit flb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it... CVE-2020-35963 Fix available 7.8 HighJanuary 3, 2021
• treasuredata fluent bit An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin... CVE-2019-9749 7.5 HighMarch 13, 2019