Package · RubyGems

fluentd

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Critical 9.8

CVE-2026-44024 Public exploit

Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd allows dynamically constructing file paths using the ${tag} placeholder, and insufficient validation of ${tag} in …

fluent fluentd kube-fluentd-operator ruby3.4-kube-logging-operator-fluentd-outputs Wolfi RubyGems

Jul 8, 2026
Critical 9.8

CVE-2017-10906

Fluentd Escape Sequence Injection Vulnerability

Escape sequence injection vulnerability in Fluentd versions 0.12.29 through 0.12.40 may allow an attacker to change the terminal UI or execute arbitrary commands on the device via unspecified vectors.

Cloud Native Computing Foundation (CNCF) Fluentd fluentd RubyGems

Dec 8, 2017