PT-2026-58907 · Bitnami · Fluentd

Published

2026-07-14

·

Updated

2026-07-14

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's in http and in forward plugins support gzip-compressed data but enforce limits only on compressed payloads through settings such as body size limit and chunk size limit, allowing crafted compressed payloads to decompress in memory to an excessive size and cause denial of service through memory exhaustion. This issue is fixed in version 1.19.3.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

BIT-FLUENTD-2026-44160

Affected Products

Fluentd