CVE-2026-44162
1 advisory.
RubyGems/fluent-plugin-s3 CVE-2026-44162: low 2.7, EPSS 0.48%
fluent-plugin-s3 Vulnerable to Denial of Service (DoS) via Decompression Bomb in `in_s3`
Action: Upgrade fluent-plugin-s3 to 1.8.5 or later.
bundle update fluent-plugin-s3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.7.0 | 1.8.5 | - |
Fixed versions
| 1.8.5 |
Sources
- osv: GHSA-xv9w-7v6q-hpjh
- https://github.com/fluent/fluent-plugin-s3/security/advisories/GHSA-xv9w-7v6q-hpjh
- https://github.com/fluent/fluent-plugin-s3/commit/e085aee001d15bcc4bd073507e74075e30550fd0
- https://github.com/fluent/fluent-plugin-s3
CVE-2026-44162 · published · modified · JSON