Fluent Bit contains five vulnerabilities, including stack buffer overflow, auth bypass, and path traversal

Overview Fluent Bit is a logging and metrics processor and forwarder that is used in a variety of cloud and container networking environments. Several vulnerabilities in Fluent Bit have been discovered that could allow for authentication bypass, remote code execution RCE and denial of service DoS...

Fluent Bit 安全漏洞

Fluent Bit is an open source log processing and analyzing system written in C by Fluent Open Source. A security vulnerability exists in Fluent Bit that stems from a flaw in the tagkey validation logic, which could cause logs to redirect to an unintended destination...

PT-2025-47922

Name of the Vulnerable Software and Affected Versions Fluent Bit versions prior to 4.1.1 Description The out file plugin in Fluent Bit does not properly sanitize tag values when creating output file names. If the File option is not specified, the plugin utilizes tag input, which is considered...

PT-2025-47920

Name of the Vulnerable Software and Affected Versions Fluent Bit affected versions not specified Description The Fluent Bit in forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditions. This allows remote attackers with netwo...

CVE-2025-58749 affecting package fluent-bit for versions less than 3.1.9-6

CVE-2025-58749 affecting package fluent-bit for versions less than 3.1.9-6. A patched version of the package is available...

CVE-2025-58749 affecting package fluent-bit for versions less than 3.0.6-4

CVE-2025-58749 affecting package fluent-bit for versions less than 3.0.6-4. A patched version of the package is available...

EUVD-2019-19112

Malware in sbrugna...

EUVD-2021-13952

Malware in sbrugna...

EUVD-2020-23546

Malware in sbrugna...

EUVD-2021-22721

Malware in sbrugna...

EUVD-2025-9768

Malicious code in bioql PyPI...

EUVD-2025-4684

Malicious code in bioql PyPI...

EUVD-2025-4694

Malicious code in bioql PyPI...

EUVD-2025-10313

Malicious code in bioql PyPI...

EUVD-2021-33528

Malicious code in bioql PyPI...

EUVD-2021-33529

Malicious code in bioql PyPI...

CVE-2025-54126 affecting package fluent-bit for versions less than 3.0.6-3

CVE-2025-54126 affecting package fluent-bit for versions less than 3.0.6-3. A patched version of the package is available...

CVE-2025-54126 affecting package fluent-bit for versions less than 3.1.9-5

CVE-2025-54126 affecting package fluent-bit for versions less than 3.1.9-5. A patched version of the package is available...

AZL-67608 CVE-2025-58749 affecting package fluent-bit for versions less than 3.1.9-6

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memory.fill instruction where the first operand memory address...

AZL-67617 CVE-2025-58749 affecting package fluent-bit for versions less than 3.0.6-4

WebAssembly Micro Runtime WAMR is a lightweight standalone WebAssembly Wasm runtime. In WAMR versions prior to 2.4.2, when running in LLVM-JIT mode, the runtime cannot exit normally when executing WebAssembly programs containing a memory.fill instruction where the first operand memory address...