Issues

• Security: bundled nghttp2 1.65.0 affected by CVE-2026-27135 (HIGH 7.5) — fixed in nghttp2 >=1.68.1

  fluent/fluent-bit#12765 · Filter by author vinaybheri opened on Nov 8, 2026

• Security: bundled c-ares 1.34.6 affected by BDSA-2026-22154 (HIGH 7.1) — fixed in c-ares >=1.34.7

  fluent/fluent-bit#12764 · Filter by author vinaybheri opened on Nov 8, 2026

• filter_modify: unclosed quote crashes at startup; aborted hot reload reads freed context

  fluent/fluent-bit#12762 · Filter by author eschabell opened on Nov 8, 2026

• Windows: Winsock send errors never reach net_error, so the keepalive pool reuses a dead connection ("could not write forward header")

  fluent/fluent-bit#12761 · Filter by author rso42 opened on Nov 8, 2026

• http_server.max_decoded_body_size: negative values are accepted and disable the limit

  fluent/fluent-bit#12757 · Filter by author eschabell opened on Nov 8, 2026

• output: shared helper to split and resend payloads rejected with 413 Payload Too Large

  fluent/fluent-bit#12746 · Filter by author cdancy opened on Nov 6, 2026
  1

• Security Vulnerability Detected in Fluent Bit 5.1.5 Docker Image – CVE-2026-111497

  status: waiting-for-triage
  fluent/fluent-bit#12744 · Filter by author svijayam opened on Nov 6, 2026

• out_s3: stalled TLS request-body writes are not bounded by net.io_timeout (5.0.4)

  fluent/fluent-bit#12742 · Filter by author eugenesable opened on Nov 5, 2026

• out_http: a successful (2xx) response larger than 4 KiB is treated as a failed flush, so the batch is re-sent Retry_Limit + 1 times (regression since 3.0.7)

  fluent/fluent-bit#12739 · Filter by author mcampbel-ext opened on Nov 5, 2026
  1

• out_opentelemetry: option to exclude specific body keys from log attributes (avoid duplication with logs_*_message_key)

  fluent/fluent-bit#12735 · Filter by author lokistars opened on Nov 5, 2026

• When several YAML files each define pipeline.outputs, outputs from files loaded before the main pipeline file are silently dropped

  status: waiting-for-triage
  fluent/fluent-bit#12724 · Filter by author udaydabbeta opened on Nov 4, 2026

• out_azure_kusto: duplicated TLS trust stores cause high memory usage and OOM during resource refresh

  status: waiting-for-triage
  fluent/fluent-bit#12723 · Filter by author dishonono opened on Nov 4, 2026

• out_opentelemetry: add header_tag / headers_key dynamic header support (like out_http)

  fluent/fluent-bit#12722 · Filter by author lokistars opened on Nov 4, 2026

• out_datadog: support Datadog Workload Identity Federation (AWS) instead of a static apikey

  fluent/fluent-bit#12715 · Filter by author devin-ai-integration opened on Nov 4, 2026

• multiline: duplicate final line emitted for regex parsers transitioning back to start_state (e.g. python, php)

  fluent/fluent-bit#12713 · Filter by author baizhenyu opened on Nov 3, 2026

• in_tail: pending multiline record silently dropped when flush_timeout fires while the input is paused

  status: waiting-for-triage
  fluent/fluent-bit#12710 · Filter by author chetanmehta94 opened on Nov 3, 2026
  1

• Option to pause inputs instead of dropping chunks when storage.total_limit_size is reached

  fluent/fluent-bit#12693 · Filter by author jimin9038 opened on Oct 30, 2026
  1

• out_opentelemetry: event_name is not exported in 5.1.x (fixed in master by ae040f9d9, needs backport)

  fluent/fluent-bit#12690 · Filter by author seblaz opened on Oct 29, 2026
  2

• fluent-bit image still ships vulnerable libbrotli1 (CVE-2026-111497)

  status: waiting-for-triage
  fluent/fluent-bit#12683 · Filter by author Saral-P opened on Oct 29, 2026
  2

• filter_multiline: synchronize buffered output-processor appends with the flush timer

  fluent/fluent-bit#12680 · Filter by author coderabbitai opened on Oct 28, 2026

• filter_multiline: per-tag streams never freed, unbounded memory growth on high pod churn

  status: waiting-for-triage
  fluent/fluent-bit#12670 · Filter by author giuliano-sider opened on Oct 28, 2026

• rewrite_tag loses records when emitter buffer limit is reached, even with filesystem buffering

  status: waiting-for-triage
  fluent/fluent-bit#12667 · Filter by author art333 opened on Oct 26, 2026

• http: more than 50 unknown headers closes the connection with no response

  fluent/fluent-bit#12660 · Filter by author arygupt opened on Oct 25, 2026
  1

• http: most parse errors close the connection with no response (only bad-method returns 400)

  fluent/fluent-bit#12658 · Filter by author arygupt opened on Oct 25, 2026
  2

• http: empty Host header closes the connection with no response

  fluent/fluent-bit#12657 · Filter by author arygupt opened on Oct 25, 2026