{"id":"CVE-2021-36088","details":"Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flb_free (called from flb_parser_json_do and flb_parser_do).","aliases":["BIT-fluent-bit-2021-36088"],"modified":"2026-05-16T04:03:06.091466996Z","published":"2021-07-01T03:15:08.847Z","database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/fluent-bit/OSV-2021-702.yaml"},{"type":"FIX","url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33750"},{"type":"FIX","url":"https://github.com/fluent/fluent-bit/commit/22346a74c07ceb90296be872be2d53eb92252a54"},{"type":"FIX","url":"https://github.com/fluent/fluent-bit/pull/3453"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}