https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 10:28:53 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-14810 bdu:2025-14810 https://cve.radiocsirt.org/vuln/bdu:2025-14810 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1064 certfr-2025-avi-1064 https://cve.radiocsirt.org/vuln/certfr-2025-avi-1064 https://cve.radiocsirt.org/vuln/euvd-2026-265029 EUVD-2026-265029 https://cve.radiocsirt.org/vuln/euvd-2026-265029 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12977 <p>Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as newlines or ../ that are treated as valid tags. Because tags influence routing and some outputs derive filenames or contents from tags, this can allow newline injection, path traversal, forged record injection, or log misrouting, impacting data integrity and log routing.</p> <p>Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as newlines or ../ that are treated as valid tags. Because tags influence routing and some outputs derive filenames or contents from tags, this can allow newline injection, path traversal, forged record injection, or log misrouting, impacting data integrity and log routing.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12977 https://cve.radiocsirt.org/vuln/ghsa-v498-rhc6-28g9 <p>Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as newlines or ../ that are treated as valid tags. Because tags influence routing and some outputs derive filenames or contents from tags, this can allow newline injection, path traversal, forged record injection, or log misrouting, impacting data integrity and log routing.</p> <p>Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with network access or the ability to write records into Splunk or Elasticsearch can supply tag_key values containing special characters such as newlines or ../ that are treated as valid tags. Because tags influence routing and some outputs derive filenames or contents from tags, this can allow newline injection, path traversal, forged record injection, or log misrouting, impacting data integrity and log routing.</p> https://cve.radiocsirt.org/vuln/ghsa-v498-rhc6-28g9 https://cve.radiocsirt.org/vuln/msrc_cve-2025-12977 msrc_CVE-2025-12977 https://cve.radiocsirt.org/vuln/msrc_cve-2025-12977 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2670 <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Fluent Bit ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.</p> <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Fluent Bit ausnutzen, um Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu verursachen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2670