Fluent - vulnerabilities (CVEs)

9 CVEs in 4 products, 0 in the last 30 days, newest from 2026-09-21.

Products

Fluentd - 6 CVEs
Fluent-bit - 1 CVEs
Fluent-plugin-s3 - 1 CVEs
Fluent Bit - 1 CVEs

Newest CVEs of Fluent

CVE-2026-61674 - CVSS 9.2 (critical), 2026-09-21: Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8,…
CVE-2026-44162 - CVSS 2.7 (low), 2026-09-14: fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the in_s3 input plugin reads the entire decompressed payload of…
CVE-2026-44161 - CVSS 7.2 (high), 2026-07-08: Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, the Fluentd out_http…
CVE-2026-44160 - CVSS 7.5 (high), 2026-07-08: Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's in_http and…
CVE-2026-44025 - CVSS 7.5 (high), 2026-07-08: Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's Monitor…
CVE-2026-44024 - CVSS 9.8 (critical), 2026-07-08: Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd allows…
CVE-2024-23722 - CVSS 7.5 (high), 2024-03-26: In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It…
CVE-2022-39379 - CVSS 9.8 (critical), 2022-11-02: Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. A remote code execution (RCE)…
CVE-2021-41186 - CVSS 7.5 (high), 2021-10-29: Fluentd collects events from various data sources and writes them to files to help unify logging infrastructure. The parser_apache2 plugin in Fluentd v0.14.14…