pkg:RubyGems/fluentd

All known vulnerabilities

• CRITICAL9.8CVE-2026-44024Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder
  from 0, < 1.19.3
• CRITICAL9.8CVE-2017-10906Fluentd Escape Sequence Injection Vulnerability
  >= 0.12.29, < 0.12.41
• HIGH7.5CVE-2026-44160Fluentd is Vulnerable to Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`
  from 0, < 1.19.3
• HIGH7.5Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API
  from 0, < 1.19.3
• HIGH7.2Fluentd is Vulnerable to Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`
  from 0, < 1.19.3
• MEDIUM5.9ReDoS vulnerability in parser_apache2
  >= 0.14.14, < 1.14.2
• LOW3.1Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)
  >= 1.13.2, < 1.15.3