Security
فارسی
All products

github.com/minio/minio

Go · Package
15 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV ParsingCVE-2026-39414 · GHSA-H749-FXX7-PWPGVersion ranges need review. github.com/minio/minio Go High No fix reported
MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer UploadsCVE-2026-40344 · GHSA-9C4Q-HQ6P-C237Version ranges need review. github.com/minio/minio Go High No fix reported
MinIO has JWT Algorithm Confusion in OIDC AuthenticationCVE-2026-33322 · GHSA-5CX5-WH4M-82FHVersion ranges need review. github.com/minio/minio Go Critical No fix reported
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STSCVE-2025-62506 · GHSA-JJJJ-JWHF-8RGRVersion ranges need review. github.com/minio/minio Go High Fix reported
Minio vulnerable to Privilege Escalation on Windows via Path separator manipulationCVE-2023-28433 · GHSA-W23Q-4HW3-2PP6 github.com/minio/minio Go High Fix reported
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST EndpointCVE-2026-42600 · GHSA-XH8F-G2QW-GCM7Version ranges need review. github.com/minio/minio Go Medium Fix reported
MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer UploadsCVE-2026-41145 · GHSA-HV4R-MVR4-25VWVersion ranges need review. github.com/minio/minio Go High No fix reported
MinIO is Vulnerable to SSE Metadata Injection via Replication HeadersCVE-2026-34204 · GHSA-3RH2-V3GR-35P9Version ranges need review. github.com/minio/minio Go High No fix reported
MinIO LDAP login brute-force via user enumeration and missing rate limitCVE-2026-33419 · GHSA-JV87-32HW-HH99Version ranges need review. github.com/minio/minio Go Critical No fix reported
Privilege Escalation on Linux/MacOSCVE-2023-28434 · GHSA-2PXW-R47W-4P8C github.com/minio/minio Go High Fix reported
MinIO allows an SFTP authentication bypass due to improperly trusted SSH keyCVE-2025-27414 · GHSA-WC79-7X8X-2P58Version ranges need review. github.com/minio/minio Go Medium Fix reported
MinIO vulnerable to privilege escalation in IAM import APICVE-2024-55949 · GHSA-CWQ8-G58R-32HGVersion ranges need review. github.com/minio/minio Go High Fix reported
MinIO information disclosure vulnerabilityCVE-2024-36107 · GHSA-95FR-CM4M-Q5P9Version ranges need review. github.com/minio/minioRed Hat Integration Camel K 1/minio GoRed Hat Medium Fix reported
Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalationCVE-2024-24747 · GHSA-XX8W-MQ23-29G4Version ranges need review. github.com/minio/minio Go High Fix reported
MinIO performs incomplete signature validation for unsigned-trailer uploadsCVE-2025-31489 · GHSA-WG47-6JQ2-Q2HHVersion ranges need review. github.com/minio/minio Go High Fix reported