Skip to content
Noroxi

treasuredata records

19 published records for vendor treasuredata.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
57.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 23
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

19 records
  • CVE-2024-4323
    47Plan

    Fluent Bit Memory Corruption Vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 27%

    treasuredata · fluent bitMay 20, 2024

  • CVE-2021-36088
    40Plan

    Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do).

    CriticalCVSS 9.8No exploitEPSS 2%

    treasuredata · fluent bitJun 30, 2021

  • CVE-2025-12977
    36Monitor

    Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs.

    CriticalCVSS 9.1No exploitEPSS 0%

    treasuredata · fluent bitNov 24, 2025

  • CVE-2025-12970
    35Monitor

    The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating leng

    HighCVSS 8.8No exploitEPSS 1%

    treasuredata · fluent bitNov 24, 2025

  • CVE-2021-27186
    31Monitor

    Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metric

    HighCVSS 7.5No exploitEPSS 1%

    treasuredata · fluent bitFeb 10, 2021

  • CVE-2020-35963
    31Monitor

    flb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the

    HighCVSS 7.8No exploitEPSS 1%

    treasuredata · fluent bitJan 3, 2021

  • CVE-2021-46879
    31Monitor

    An issue was discovered in Treasure Data Fluent Bit 1.7.1, a wrong variable is used to get the msgpack data resulting in a heap overflow in

    HighCVSS 7.8No exploitEPSS 0%

    treasuredata · fluent bitApr 11, 2023

  • CVE-2021-46878
    31Monitor

    An issue was discovered in Treasure Data Fluent Bit 1.7.1, erroneous parsing in flb_pack_msgpack_to_json_format leads to type confusion bug

    HighCVSS 7.8No exploitEPSS 0%

    treasuredata · fluent bitApr 11, 2023

  • CVE-2024-25125
    30Monitor

    Absolute path traversal vulnerability in digdag server

    MediumCVSS 5.3No exploitEPSS 29%

    treasuredata · digdagFeb 13, 2024

  • CVE-2019-9749
    30Monitor

    An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4.

    HighCVSS 7.5No exploitEPSS 1%

    treasuredata · fluent bitMar 13, 2019

  • CVE-2024-50609
    30Monitor

    An issue was discovered in Fluent Bit 3.1.9.

    HighCVSS 7.5No exploitEPSS 1%

    treasuredata · fluent bitFeb 18, 2025

  • CVE-2024-50608
    30Monitor

    An issue was discovered in Fluent Bit 3.1.9.

    HighCVSS 7.5No exploitEPSS 1%

    treasuredata · fluent bitFeb 18, 2025

  • CVE-2024-23722
    30Monitor

    In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-

    HighCVSS 7.5Proof of conceptEPSS 0%

    treasuredata · fluent bitMar 26, 2024

  • CVE-2024-26455
    30Monitor

    fluent-bit 2.2.2 contains a Use-After-Free vulnerability in /fluent-bit/plugins/custom_calyptia/calyptia.c.

    HighCVSS 7.5No exploitEPSS 0%

    treasuredata · fluent bitFeb 26, 2024

  • CVE-2025-12969
    26Monitor

    Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain configuration conditi

    MediumCVSS 6.5No exploitEPSS 0%

    treasuredata · fluent bitNov 24, 2025

  • CVE-2025-29478
    22Monitor

    An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.

    MediumCVSS 5.5No exploitEPSS 0%

    treasuredata · fluent bitApr 7, 2025

  • CVE-2025-29477
    22Monitor

    An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event.

    MediumCVSS 5.5No exploitEPSS 0%

    treasuredata · fluent bitApr 4, 2025

  • CVE-2025-12972
    21Monitor

    Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names.

    MediumCVSS 5.3No exploitEPSS 0%

    treasuredata · fluent bitNov 24, 2025

  • CVE-2025-12978
    21Monitor

    Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact

    MediumCVSS 5.4No exploitEPSS 0%

    treasuredata · fluent bitNov 24, 2025