FL
Vendor
fluent
7
CVEs
0
On KEV
0
New 30D
Products
FL9.8
fluentd
fluent
5 CVEs0 on KEV0 new
FL9.2
fluent-bit
fluent
1 CVEs0 on KEV0 new
FL2.7
fluent-plugin-s3
fluent
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-61674 | FL fluent-bit fluent | 9.2 | Sep 21 | Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler |
| CVE-2026-44162 | FL fluent-plugin-s3 fluent | 2.7 | Sep 14 | fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3` |
| CVE-2026-44161 | FL fluentd fluent | 7.2 | Jul 8 | Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http` |
| CVE-2026-44160 | FL fluentd fluent | 7.5 | Jul 8 | Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward` |
| CVE-2026-44025 | FL fluentd fluent | 7.5 | Jul 8 | Fluentd: Exposure of Sensitive Information via Monitor Agent API |
| CVE-2026-44024 | FL fluentd fluent | 9.8 | Jul 8 | Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder |
| CVE-2022-39379 | FL fluentd fluent | 9.8 | Nov 2 | Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration) |