Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GO-2026-5757
  • Go/github.com/minio/minio
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple`... 25 Jun
  • No fix available
GO-2026-5415
  • Go/github.com/minio/minio
MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing... 25 Jun
  • No fix available
GO-2026-5437
  • Go/github.com/minio/minio
MinIO has an Unauthenticated Object Write via Query-String Credential Signature... 25 Jun
  • No fix available
GO-2026-5284
  • Go/github.com/minio/minio
MinIO has an Unauthenticated Object Write via Missing Signature Verification in... 25 Jun
  • No fix available
GHSA-xh8f-g2qw-gcm7
  • Go/github.com/minio/minio
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple`... 05 May
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-hv4r-mvr4-25vw
  • Go/github.com/minio/minio
MinIO has an Unauthenticated Object Write via Query-String Credential Signature... 14 Apr
  • No fix available
  • Severity - 8.8 (High)
GHSA-9c4q-hq6p-c237
  • Go/github.com/minio/minio
MinIO has an Unauthenticated Object Write via Missing Signature Verification in... 14 Apr
  • No fix available
  • Severity - 8.8 (High)
GHSA-h749-fxx7-pwpg
  • Go/github.com/minio/minio
MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing 09 Apr
  • No fix available
  • Severity - 7.1 (High)
GO-2026-4896
  • Go/github.com/minio/minio
MinIO is Vulnerable to SSE Metadata Injection via Replication Headers in... 02 Apr
  • No fix available
GHSA-3rh2-v3gr-35p9
  • Go/github.com/minio/minio
MinIO is Vulnerable to SSE Metadata Injection via Replication Headers 27 Mar
  • No fix available
  • Severity - 7.1 (High)
GO-2026-4803
  • Go/github.com/minio/minio
MinIO LDAP login brute-force via user enumeration and missing rate limit in... 23 Mar
  • No fix available
GO-2026-4779
  • Go/github.com/minio/minio
MinIO has JWT Algorithm Confusion in OIDC Authentication in... 23 Mar
  • No fix available
GHSA-jv87-32hw-hh99
  • Go/github.com/minio/minio
MinIO LDAP login brute-force via user enumeration and missing rate limit 20 Mar
  • No fix available
  • Severity - 9.1 (Critical)
GHSA-5cx5-wh4m-82fh
  • Go/github.com/minio/minio
MinIO has JWT Algorithm Confusion in OIDC Authentication 19 Mar
  • No fix available
  • Severity - 9.2 (Critical)
GO-2025-4034
  • Go/github.com/minio/minio
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in... 30 Oct 2025
  • Fix available
GHSA-jjjj-jwhf-8rgr
  • Go/github.com/minio/minio
MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in... 16 Oct 2025
  • Fix available
  • Severity - 8.1 (High)