Is Fluent Bit 1.0.4 affected?

CVSS 7.8

2 known vulnerabilities affect 1.0.4 (highest CVSS 7.8).

Your branch 1.0 has reached end of life.

183 newer releases in its track, up to 5.2.0. What changed up to 5.2.0

Vulnerabilities affecting 1.0.4

7.8
CVE-2020-35963 flb_gzip_compress in flb_gzip.c in Fluent Bit before 1.6.4 has an out-of-bounds write because it does not use the correct calculation of the maximum gzip data-size expansion. fixed in 1.6.4
7.5
CVE-2019-9749 An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. When this plugin acts as an MQTT broker (server), it mishandles incoming network messages. After processing a crafted p…