fluent-plugins-nursery vulnerabilities

Products

• fluent-plugin-opentelemetry 1

Latest fluent-plugins-nursery CVEs

Newest publication first

1. CVE-2026-44163 fluent-plugin-opentelemetry: Denial of Service (DoS) via Large Payloads and Decompression Bombs in `in_opentelemetry`

   Published 2026-09-15

   Medium·CVSS 5.3 EPSS 0.42%

   fluent-plugin-opentelemetry is a Fluentd input and output plugin for forwarding OpenTelemetry Protocol data. Prior to 0.5.3, the in_opentelemetry HTTP input read the entire incoming request body and decompressed payloads into memory without enforcing maximum size thresholds. When...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.