{"schema_version":1,"title":"Treasuredata vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 5 vulnerabilities in Treasuredata: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2025-12978, was published on 24 November 2025. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/treasuredata","json_url":"https://junglewise.ai/threats/vendors/treasuredata.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/treasuredata","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":true,"counts":{"high":1,"all_time":5,"critical":1,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":5},"latest":[{"cve":"CVE-2025-12978","cvss":5.4,"epss":0.0039,"slug":"cve-2025-12978-fluent-bit-in-http-in-splunk-and-in-elasticsearch-input-plugins","title":"Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that…","severity":"medium","exploited":false,"published_at":"2025-11-24T15:15:46.873+00:00","url":"https://junglewise.ai/threats/cve-2025-12978-fluent-bit-in-http-in-splunk-and-in-elasticsearch-input-plugins"},{"cve":"CVE-2025-12977","cvss":9.1,"epss":0.0073,"slug":"cve-2025-12977-fluent-bit-in-http-in-splunk-and-in-elasticsearch-input-plugins","title":"Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with…","severity":"critical","exploited":false,"published_at":"2025-11-24T15:15:46.77+00:00","url":"https://junglewise.ai/threats/cve-2025-12977-fluent-bit-in-http-in-splunk-and-in-elasticsearch-input-plugins"},{"cve":"CVE-2025-12972","cvss":5.3,"epss":0.009,"slug":"cve-2025-12972-fluent-bit-out-file-plugin-does-not-properly-sanitize-tag-values","title":"Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option…","severity":"medium","exploited":false,"published_at":"2025-11-24T15:15:46.627+00:00","url":"https://junglewise.ai/threats/cve-2025-12972-fluent-bit-out-file-plugin-does-not-properly-sanitize-tag-values"},{"cve":"CVE-2025-12970","cvss":8.8,"epss":0.0104,"slug":"cve-2025-12970-the-extract-name-function-in-fluent-bit-in-docker-input-plugin","title":"The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer…","severity":"high","exploited":false,"published_at":"2025-11-24T15:15:46.507+00:00","url":"https://junglewise.ai/threats/cve-2025-12970-the-extract-name-function-in-fluent-bit-in-docker-input-plugin"},{"cve":"CVE-2025-12969","cvss":6.5,"epss":0.0061,"slug":"cve-2025-12969-fluent-bit-in-forward-input-plugin-does-not-properly-enforce-the","title":"Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain…","severity":"medium","exploited":false,"published_at":"2025-11-24T15:15:46.38+00:00","url":"https://junglewise.ai/threats/cve-2025-12969-fluent-bit-in-forward-input-plugin-does-not-properly-enforce-the"}],"vendor":{"hub":true,"name":"Treasuredata","slug":"treasuredata","description":"Software and services company providing data collection, analytics, and streaming solutions.","url":"https://junglewise.ai/threats/vendors/treasuredata"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2025-12977","cvss":9.1,"epss":0.0073,"slug":"cve-2025-12977-fluent-bit-in-http-in-splunk-and-in-elasticsearch-input-plugins","title":"Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins fail to sanitize tag_key inputs. An attacker with…","severity":"critical","exploited":false,"published_at":"2025-11-24T15:15:46.77+00:00","url":"https://junglewise.ai/threats/cve-2025-12977-fluent-bit-in-http-in-splunk-and-in-elasticsearch-input-plugins"},{"cve":"CVE-2025-12970","cvss":8.8,"epss":0.0104,"slug":"cve-2025-12970-the-extract-name-function-in-fluent-bit-in-docker-input-plugin","title":"The extract_name function in Fluent Bit in_docker input plugin copies container names into a fixed size stack buffer…","severity":"high","exploited":false,"published_at":"2025-11-24T15:15:46.507+00:00","url":"https://junglewise.ai/threats/cve-2025-12970-the-extract-name-function-in-fluent-bit-in-docker-input-plugin"},{"cve":"CVE-2025-12969","cvss":6.5,"epss":0.0061,"slug":"cve-2025-12969-fluent-bit-in-forward-input-plugin-does-not-properly-enforce-the","title":"Fluent Bit in_forward input plugin does not properly enforce the security.users authentication mechanism under certain…","severity":"medium","exploited":false,"published_at":"2025-11-24T15:15:46.38+00:00","url":"https://junglewise.ai/threats/cve-2025-12969-fluent-bit-in-forward-input-plugin-does-not-properly-enforce-the"},{"cve":"CVE-2025-12978","cvss":5.4,"epss":0.0039,"slug":"cve-2025-12978-fluent-bit-in-http-in-splunk-and-in-elasticsearch-input-plugins","title":"Fluent Bit in_http, in_splunk, and in_elasticsearch input plugins contain a flaw in the tag_key validation logic that…","severity":"medium","exploited":false,"published_at":"2025-11-24T15:15:46.873+00:00","url":"https://junglewise.ai/threats/cve-2025-12978-fluent-bit-in-http-in-splunk-and-in-elasticsearch-input-plugins"},{"cve":"CVE-2025-12972","cvss":5.3,"epss":0.009,"slug":"cve-2025-12972-fluent-bit-out-file-plugin-does-not-properly-sanitize-tag-values","title":"Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option…","severity":"medium","exploited":false,"published_at":"2025-11-24T15:15:46.627+00:00","url":"https://junglewise.ai/threats/cve-2025-12972-fluent-bit-out-file-plugin-does-not-properly-sanitize-tag-values"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[{"name":"Treasuredata Fluent Bit","slug":"treasuredata-fluent-bit","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/treasuredata-fluent-bit"}]}