Product by Open Source

    Fluentd

    6 known vulnerabilities in Fluentd (Open Source), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Fluentd (Open Source)
    CriticalCVE-2026-44024

    Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

    also in 3 other products

    9.8
    HighCVE-2026-44160

    Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

    also in 2 other products

    7.5
    HighCVE-2026-44025

    Fluentd: Exposure of Sensitive Information via Monitor Agent API

    also in 2 other products

    7.5
    HighCVE-2026-44161

    Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`

    also in 3 other products

    7.2
    HighCVE-2025-32414

    XMLSoft libxml2: Return of Wrong Status Code

    also in 11 other products

    5.6
    LowCVE-2025-6170

    Libxml2: stack buffer overflow in xmllint interactive shell command handling

    also in 43 other products

    2.5

    News

    All products by Open Source