RubyGems/fluentd CVE-2026-44161: high 7.2

Fluentd is Vulnerable to Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`

Action: Upgrade fluentd to 1.19.3 or later.

bundle update fluentd

Affected

Fixed versions

Sources

• osv: GHSA-72f5-rr8c-r6gr
• https://github.com/fluent/fluentd/security/advisories/GHSA-72f5-rr8c-r6gr
• https://github.com/fluent/fluentd
• https://github.com/fluent/fluentd/releases/tag/v1.19.3

CVE-2026-44161 · published 2026-06-26T16:36:11Z · modified 2026-09-10T03:50:48.732426416Z · JSON