Skip to content
OpenAdvisories

Vendor

FluentBit

5 known vulnerabilities.

Products

Fluent Bit 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-12977

    CVE-2025-12977

    Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as new…

    FluentBit Fluent Bit