Skip to content
OpenAdvisories

Vendor

fluent

8 known vulnerabilities.

Products

fluentd 6 fluent-bit 1 fluent-plugin-s3 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.7
    CVE-2026-44162

    fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`

    fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the in_s3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompression_size_limit. An attacker with…

    fluent fluent-plugin-s3 fluent-plugin-s3 RubyGems
  • Low 3.1
    CVE-2022-39379 EPSS 45%

    Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

    Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. A remote code execution (RCE) vulnerability in non-default configurations of Fluentd allows unauthenticated attackers to execute arbitrary …

    fluent fluentd fluentd RubyGems