https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 02:59:22 +0000 https://cve.radiocsirt.org/vuln/bit-fluentd-2026-44160 <p><strong>Affected:</strong> Bitnami: fluentd</p> <p>Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd&#39;s in_http and in_forward plugins support gzip-compressed data but enforce limits only on compressed payloads through settings such as body_size_limit and chunk_size_limit, allowing crafted compressed payloads to decompress in memory to an excessive size and cause denial of service through memory exhaustion. This issue is fixed in version 1.19.3.</p> <p><strong>Affected:</strong> Bitnami: fluentd</p> <p>Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd&#39;s in_http and in_forward plugins support gzip-compressed data but enforce limits only on compressed payloads through settings such as body_size_limit and chunk_size_limit, allowing crafted compressed payloads to decompress in memory to an excessive size and cause denial of service through memory exhaustion. This issue is fixed in version 1.19.3.</p> https://cve.radiocsirt.org/vuln/bit-fluentd-2026-44160 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0958 certfr-2026-avi-0958 https://cve.radiocsirt.org/vuln/certfr-2026-avi-0958 https://cve.radiocsirt.org/vuln/cleanstart-2026-pm11258 <p><strong>Affected:</strong> CleanStart: kube-logging-operator</p> <p>Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details.</p> <p><strong>Affected:</strong> CleanStart: kube-logging-operator</p> <p>Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details.</p> https://cve.radiocsirt.org/vuln/cleanstart-2026-pm11258 https://cve.radiocsirt.org/vuln/euvd-2026-335489 EUVD-2026-335489 https://cve.radiocsirt.org/vuln/euvd-2026-335489 https://cve.radiocsirt.org/vuln/fkie_cve-2026-44160 <p>Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd&#39;s in_http and in_forward plugins support gzip-compressed data but enforce limits only on compressed payloads through settings such as body_size_limit and chunk_size_limit, allowing crafted compressed payloads to decompress in memory to an excessive size and cause denial of service through memory exhaustion. This issue is fixed in version 1.19.3.</p> <p>Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd&#39;s in_http and in_forward plugins support gzip-compressed data but enforce limits only on compressed payloads through settings such as body_size_limit and chunk_size_limit, allowing crafted compressed payloads to decompress in memory to an excessive size and cause denial of service through memory exhaustion. This issue is fixed in version 1.19.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-44160 https://cve.radiocsirt.org/vuln/ghsa-j9cw-hwqf-85w7 <p><strong>Affected:</strong> RubyGems: fluentd</p> <p>Fluentd&#39;s `in_http` and `in_forward` plugins support receiving gzip-compressed data. While Fluentd correctly enforces size limits on the incoming compressed payloads (e.g., via `body_size_limit` or `chunk_size_limit`), it was discovered that there is no limit enforced on the size of the decompressed data.</p> <p>If a Fluentd instance is exposed to untrusted networks, an attacker can send a maliciously crafted, highly compressed payload. When Fluentd attempts to decompress this payload in memory, it will expand to an excessive size, completely bypassing the intended payload size limits.</p> <p>### Impact This vulnerability allows for a **Denial of Service (DoS)** attack via memory exhaustion. The rapid memory consumption during decompression can easily lead to an Out-of-Memory kill of the Fluentd process by the operating system. This results in the disruption of all log collection and forwarding capabilities on the affected node.</p> <p>### Patches v1.19.3</p> <p>### Workarounds If an immediate upgrade is not possible, users are strongly advised to apply the following mitigations:</p> <p>1. Restrict Network Access * Ensure that Fluentd input ports (such as `9880` for `in_http` and `24224` for `in_forward`) are deployed within a closed, trusted network. Use firewall rules (e.g., iptables, AWS Security Groups) to block access from untrusted networks or instances. 2. Use a Reverse Proxy * If developers must expose HTTP ingestion to external sources, place a robust reverse proxy (such as Nginx) in fro…</p> <p><strong>Affected:</strong> RubyGems: fluentd</p> <p>Fluentd&#39;s `in_http` and `in_forward` plugins support receiving gzip-compressed data. While Fluentd correctly enforces size limits on the incoming compressed payloads (e.g., via `body_size_limit` or `chunk_size_limit`), it was discovered that there is no limit enforced on the size of the decompressed data.</p> <p>If a Fluentd instance is exposed to untrusted networks, an attacker can send a maliciously crafted, highly compressed payload. When Fluentd attempts to decompress this payload in memory, it will expand to an excessive size, completely bypassing the intended payload size limits.</p> <p>### Impact This vulnerability allows for a **Denial of Service (DoS)** attack via memory exhaustion. The rapid memory consumption during decompression can easily lead to an Out-of-Memory kill of the Fluentd process by the operating system. This results in the disruption of all log collection and forwarding capabilities on the affected node.</p> <p>### Patches v1.19.3</p> <p>### Workarounds If an immediate upgrade is not possible, users are strongly advised to apply the following mitigations:</p> <p>1. Restrict Network Access * Ensure that Fluentd input ports (such as `9880` for `in_http` and `24224` for `in_forward`) are deployed within a closed, trusted network. Use firewall rules (e.g., iptables, AWS Security Groups) to block access from untrusted networks or instances. 2. Use a Reverse Proxy * If developers must expose HTTP ingestion to external sources, place a robust reverse proxy (such as Nginx) in fro…</p> https://cve.radiocsirt.org/vuln/ghsa-j9cw-hwqf-85w7 https://cve.radiocsirt.org/vuln/jvndb-2026-000090 <p>Fluentd provided by Fluentd Project contains multiple vulnerabilities listed below. &lt;a href=&#39;https://cwe.mitre.org/data/definitions/22.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://www.cve.org/CVERecord?id=CVE-2026-44024&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://www.cve.org/CVERecord?id=CVE-2026-44025&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/409.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://www.cve.org/CVERecord?id=CVE-2026-44160&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/918.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://www.cve.org/CVERecord?id=CVE-2026-44161&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/409.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://www.cve.org/CVERecord?id=CVE-2026-44162&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/409.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://www.cve.org/CVERecord?id=CVE-2026-44163&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Path traversal in ${tag} Placeholder (CWE-22) - CVE-2026-44024&lt;/li&gt;&lt;li&gt;Missing authentication for critical function in Monitor Agent API (CWE-306) - CVE-2026-44025&lt;/li&gt;&lt;li&gt;Improper handling of highly compressed data in in_http and in_forward (CWE-409) - CVE-2026-44160&lt;/li&gt;&lt;li&gt;Server-side request forgery in out_http (CWE-918) - CVE-2026-44161&lt;/li&gt;&lt;li&gt;Improper handling of highly compressed data in in_s3 (CWE-409) - CVE-2026-44162&lt;/li&gt;&lt;li&gt;Improper handling of high…</p> <p>Fluentd provided by Fluentd Project contains multiple vulnerabilities listed below. &lt;a href=&#39;https://cwe.mitre.org/data/definitions/22.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://www.cve.org/CVERecord?id=CVE-2026-44024&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;https://cwe.mitre.org/data/definitions/306.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://www.cve.org/CVERecord?id=CVE-2026-44025&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/409.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://www.cve.org/CVERecord?id=CVE-2026-44160&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/918.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://www.cve.org/CVERecord?id=CVE-2026-44161&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/409.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://www.cve.org/CVERecord?id=CVE-2026-44162&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt; &lt;a href=&#39;https://cwe.mitre.org/data/definitions/409.html&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;a href=&#39;http://www.cve.org/CVERecord?id=CVE-2026-44163&#39; target=&#39;_blank&#39;&gt;&lt;/a&gt;&lt;ul&gt;&lt;li&gt;Path traversal in ${tag} Placeholder (CWE-22) - CVE-2026-44024&lt;/li&gt;&lt;li&gt;Missing authentication for critical function in Monitor Agent API (CWE-306) - CVE-2026-44025&lt;/li&gt;&lt;li&gt;Improper handling of highly compressed data in in_http and in_forward (CWE-409) - CVE-2026-44160&lt;/li&gt;&lt;li&gt;Server-side request forgery in out_http (CWE-918) - CVE-2026-44161&lt;/li&gt;&lt;li&gt;Improper handling of highly compressed data in in_s3 (CWE-409) - CVE-2026-44162&lt;/li&gt;&lt;li&gt;Improper handling of high…</p> https://cve.radiocsirt.org/vuln/jvndb-2026-000090 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2096 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fluentd ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service zu verursachen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fluentd ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service zu verursachen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2096