fluent/fluentd Security Advisories | GitStock

high2026-06-26

Fluentd is Vulnerable to Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`

GHSA-72f5-rr8c-r6gr · CVE-2026-44161

high2026-06-26

Fluentd is Vulnerable to Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`

GHSA-j9cw-hwqf-85w7 · CVE-2026-44160

high2026-06-26

Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API

GHSA-pr7j-96cj-549h · CVE-2026-44025

critical2026-06-26

Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

GHSA-44hj-4m45-frj3 · CVE-2026-44024

low2022-11-02

fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)

GHSA-fppq-mj76-fpj2 · CVE-2022-39379

critical2022-05-13

Fluentd Escape Sequence Injection Vulnerability

GHSA-5jrp-w8fr-mrww · CVE-2017-10906