Known vulnerabilities in Fluentd

Software: Fluentd
Software CPE: cpe:2.3:a:fluentd:fluentd:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Fluentd Fluentd is affected by 10 known vulnerabilities: 1 high, 7 medium, 2 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152738 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CWE-22 Medium
No
No
1.19.4 29.09.2026 SB2026092923
#VU152737 - Allocation of Resources Without Limits or Throttling
CWE-770 Medium
No
No
1.19.4 29.09.2026 SB2026092923
#VU152736 - Improper Handling of Highly Compressed Data (Data Amplification)
CWE-409 Medium
No
No
1.19.4 29.09.2026 SB2026092923
#VU152735 - Improper Handling of Highly Compressed Data (Data Amplification)
CWE-409 Low
No
No
1.19.4 29.09.2026 SB2026092923
#VU135830 - Server-Side Request Forgery (SSRF)
CVE-2026-44161
CWE-918 Medium
No
No
1.19.3 29.06.2026 SB20260629114
#VU135829 - Improper Handling of Highly Compressed Data (Data Amplification)
CVE-2026-44160
CWE-409 Medium
No
No
1.19.3 29.06.2026 SB20260629114
#VU135828 - Missing Authentication for Critical Function
CVE-2026-44025
CWE-306 Medium
No
No
1.19.3 29.06.2026 SB20260629114
SB2026083028
#VU135827 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-44024
CWE-22 High
Available
No
1.19.3 29.06.2026 SB20260629114
SB2026083028
#VU116003 - Deserialization of Untrusted Data
CVE-2022-39379
CWE-502 Low
No
No
1.15.3 22.09.2025 SB2022110284
SB2025092257
SB2025092258
and 1 more
#VU135826 - Inefficient Regular Expression Complexity
CVE-2021-41186
CWE-1333 Medium
No
No
1.14.2 29.10.2021 SB2021102933