Fluent Bit (aka fluent-bit) 1.7.0 through 1.7.4 has a double free in flbfree (called from flbparserjsondo and flbparserdo).
{ "cpes": [ "cpe:2.3:a:treasuredata:fluent_bit:*:*:*:*:*:*:*:*" ], "severity": "Critical" }