CRITICAL9.8RubyGems
GHSA-44hj-4m45-frj3· BIT-fluentd-2026-44024, CVE-2026-44024Fluentd is Vulnerable to Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder
Modified: 9/10/2026
package
RubyGems/fluentd
pkg:rubygems/fluentd
CRITICAL9.8RubyGems
GHSA-5jrp-w8fr-mrww· CVE-2017-10906Fluentd Escape Sequence Injection Vulnerability
Modified: 12/5/2024
HIGH7.2RubyGems
GHSA-72f5-rr8c-r6gr· BIT-fluentd-2026-44161, CVE-2026-44161Fluentd is Vulnerable to Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`
Modified: 9/10/2026
LOW3.1RubyGems
GHSA-fppq-mj76-fpj2· BIT-fluentd-2022-39379, CVE-2022-39379fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)
Modified: 2/21/2024
MEDIUM5.9RubyGems
GHSA-hwhf-64mh-r662· BIT-fluentd-2021-41186, CVE-2021-41186ReDoS vulnerability in parser_apache2
Modified: 7/8/2026
HIGH7.5RubyGems
GHSA-j9cw-hwqf-85w7· BIT-fluentd-2026-44160, CVE-2026-44160Fluentd is Vulnerable to Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`
Modified: 9/10/2026
HIGH7.5RubyGems
GHSA-pr7j-96cj-549h· BIT-fluentd-2026-44025, CVE-2026-44025Fluentd is Vulnerable to Exposure of Sensitive Information via Monitor Agent API
Modified: 9/10/2026