fluent vulnerabilities
8 published CVEs name fluent among the affected products.
- 8Published CVEs8 of them scored
- 6Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61674
Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler
fluent · fluent-bit
Critical9.2 - CVE-2026-44162
fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`
fluent · fluent-plugin-s3
Low2.7 - CVE-2026-44161
Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`
fluent · fluentd
High7.2 - CVE-2026-44160
Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`
fluent · fluentd
High7.5 - CVE-2026-44025
Fluentd: Exposure of Sensitive Information via Monitor Agent API
fluent · fluentd
High7.5 - CVE-2026-44024
Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder
fluent · fluentd
Critical9.8 - CVE-2022-39379
Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)
fluent · fluentd
Low3.1 - CVE-2021-41186
ReDoS vulnerability in parser_apache2
fluent · fluentd
Medium5.9