27 matches found
CVE-2026-44162
fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the ins3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompressionsizelimit. An attacker with permission to upload objects to the...
CVE-2026-44162
fluent-plugin-s3 (versions 0.7.0 to 1.8.4) is vulnerable to a decompression bomb in its in_s3 input plugin (CWE-409). The plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompression_size_limit. An attacker with permission to upload o...
CVE-2026-44162 fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`
fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the ins3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompressionsizelimit. An attacker with permission to upload objects to the...
CVE-2026-44162 fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`
fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the ins3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompressionsizelimit. An attacker with permission to upload objects to the...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the inopentelemetry process. An attacker can cause excessive memory consumption by sending a large HTTP request or a highly compressed payload that decompresses to a very large...
Allocation of Resources Without Limits or Throttling
Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the ins3 process. An attacker can cause excessive memory consumption by uploading a highly compressed file that decompresses to a large size, leading to resource exhaustion and...
GHSA-XV9W-7V6Q-HPJH fluent-plugin-s3 Vulnerable to Denial of Service (DoS) via Decompression Bomb in `in_s3`
The fluent-plugin-s3 plugin specifically the ins3 input plugin supports reading and decompressing heavily compressed files such as gzip, lzma2, and lzop from Amazon S3. It was discovered that the plugin read the entire decompressed payload into memory at once without enforcing a strict size limit...
Malicious code in fluent_plugin-statsd-event (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fluent_plugin-statsd (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6910 Malicious code in fluent_plugin-statsd-event (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6908 Malicious code in fluent_plugin-stats-notifier (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fluent_plugin-stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fluent_plugin-dogstatsd-mediba (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fluent_plugin-dogstatsd (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fluent_plugin-datadog-statsd (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fluent_plugin-cloudwatch-logs-foxtrot9 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6902 Malicious code in fluent_plugin-cloudwatch-logs-foxtrot9 (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fluent_plugin-airbrake-python (RubyGems)
--- -= Per source details. Do not edit below this line.=-...