CVE-2026-42882

creationtimestamp| type| source ---|---|--- 2026-05-11 21:43:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlmakxtgsm2p 2026-05-12 06:00:34+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mln4edlx4r2m 2026-05-12 06:00:37+00:00| seen|...

CVE-2026-42882

oxyno-zeta/s3-proxy is an aws s3 proxy written in go. Prior to 5.0.0, s3-proxy contains an authentication bypass caused by inconsistent URL path interpretation between the authentication middleware and the bucket handler. The authentication middleware evaluates resource path patterns against the...