Vulnerabilities

Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that fails to enforce exact key-length matching.

Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names.

Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs.

The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer without validating length.