ruby3.3-fluentd-kubernetes-daemonset-1.19-kinesis

2 results · Clear filters · Feed

• Critical 9.8
  CVE-2026-44024 Public exploit

  Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

  Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd allows dynamically constructing file paths using the ${tag} placeholder, and insufficient validation of ${tag} in …

  fluent fluentd kube-fluentd-operator ruby3.4-kube-logging-operator-fluentd-outputs Wolfi RubyGems
  Jul 8, 2026
• Medium 6.3
  CVE-2026-54900 Public exploit

  Oj: Negative-Size memcpy in Oj::Parser create_id Attribute Handling

  Oj (Optimized JSON) is a JSON parser and Object marshaller packaged as a Ruby gem. In versions prior to 3.17.2, when in usual mode with create_id enabled, Oj::Parser#parse is vulnerable to heap corruption via a negative-size memcpy. When a JSON object key is …

  ohler55 oj ruby3.4-kube-logging-operator-fluentd-outputs ruby3.2-kube-logging-operator-fluentd-outputs Debian Ubuntu Wolfi RubyGems
  Jun 30, 2026