Fluent Bit out_forward Secure-Forward handshake overflows a 32-byte stack buffer in secure_forward_pong() by memcpy() of attacker-controlled PONG[2] “reason” with no bounds/type checks. A malicious or MITM upstream forward server can trigger crash (DoS) with canary, or RCE without canary/with disclosure. Affects >=0.11.0; no patch available—avoid untrusted forward endpoints and disable –supervisor where possible.