fluentd

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. Fluentd vulnerable to remote code execution due to insecure deserialization (in non-default configuration)CVE-2022-39379fluent · CVSS 3.1 · 45% likely

   CWE-502

2. ReDoS vulnerability in parser_apache2CVE-2021-41186fluent · CVSS 5.9 · 2.2% likely

   CWE-400

3. Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` PlaceholderCVE-2026-44024fluent · CVSS 9.8 · 1.1% likelycovered by CyberSIXT

   CWE-22

4. Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward`CVE-2026-44160fluent · CVSS 7.5 · 0.6% likelycovered by CyberSIXT

   CWE-409

5. Fluentd: Exposure of Sensitive Information via Monitor Agent APICVE-2026-44025fluent · CVSS 7.5 · 0.5% likelycovered by CyberSIXT

   CWE-306

6. Fluentd: Server-Side Request Forgery (SSRF) via Placeholder Expansion in `out_http`CVE-2026-44161fluent · CVSS 7.2 · 0.4% likelycovered by CyberSIXT

   CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.