416 matches found
PT-2026-101084
Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...
PT-2026-100487
Security vulnerability affects the ruby-fluentd-1.19 package. This issue is resolved in later releases. See references for vulnerability details...
Vulnerabilities found in Oracle Communications
Oracle has identified 31 vulnerabilities in various Oracle Communications products, including Oracle Communications Unified Assurance, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications MetaSolv Solution Module – ASR, Oracle Communications Service Catalo...
EUVD-2026-78679
fluent-plugin-opentelemetry is a Fluentd input and output plugin for forwarding OpenTelemetry Protocol data. Prior to 0.5.3, the inopentelemetry HTTP input read the entire incoming request body and decompressed payloads into memory without enforcing maximum size thresholds. When an OpenTelemetry...
CVE-2026-44163
CVE-2026-44163 affects the fluent-plugin-opentelemetry plugin for Fluentd, specifically the in_opentelemetry HTTP input. Prior to version 0.5.3 , the plugin read the entire incoming request body and decompressed payloads into memory without enforcing maximum size thresholds . An attacker on an un...
CVE-2026-44162
fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the ins3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompressionsizelimit. An attacker with permission to upload objects to the...
CVE-2026-44162 fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`
fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the ins3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompressionsizelimit. An attacker with permission to upload objects to the...
CVE-2026-44162 fluent-plugin-s3: Denial of Service (DoS) via Decompression Bomb in `in_s3`
fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the ins3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompressionsizelimit. An attacker with permission to upload objects to the...
CVE-2026-44162: Improper Handling of Highly Compressed Data (Data Amplification)
fluent-plugin-s3 is an Amazon S3 input and output plugin for Fluentd. From 0.7.0 to 1.8.4, the ins3 input plugin reads the entire decompressed payload of gzip, lzma2, and lzop objects into memory without enforcing a decompressionsizelimit. An attacker with permission to upload objects to the...
SUSE CVE-2026-54680
Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow recordtransformer.records values directly into fluent.conf without...
OESA-2026-3538 rubygem-fluentd security update
Fluentd is an open source data collector designed to scale and simplify log management. It can collect, process and ship many kinds of data in near real-time. Security Fixes: Fluentd allows dynamically constructing file paths using the $tag placeholder. It was discovered that validation for this...
GO-2026-6142 Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator
Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator...
PT-2026-80386
Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator...
Critical Photon OS Security Update - PHSA-2026-5.0-91-0960
Updates of 'coreutils', 'glib', 'rubygem-fluentd', 'alsa-lib', 'go' packages of Photon OS have been released...
GO-2025-4188 vulnerabilities
Vulnerabilities for packages: go-discover, aws-flb-kinesis, php-fpmexporter, hello-world-golang, kpt, gostatsd, aws-flb-cloudwatch, kube-fluentd-operator, newrelic-nri-statsd, smokescreen, src-fingerprint, terraform-provider-google, kubeflow, neuvector-dbgen, docker-credential-gcr,...
GHSA-4MRV-5P47-P938 vulnerabilities
Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator...
CVE-2026-54522 vulnerabilities
Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator...
CVE-2026-54522 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...
