GO-2026-4803 vulnerabilities

Vulnerabilities for packages: minio...

GO-2024-2886 vulnerabilities

Vulnerabilities for packages: minio...

GO-2025-4034 vulnerabilities

Vulnerabilities for packages: minio...

GO-2026-4779 vulnerabilities

Vulnerabilities for packages: minio...

GO-2023-2163 vulnerabilities

Vulnerabilities for packages: nats, nats-server, minio, k3s...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: vcluster, loki, tempo, dgraph, kubevela, terragrunt, minio, datadog-agent, gitlab-runner, teleport, terraform-mcp-server, k8sgpt, opentelemetry-collector, witness, weaviate, cri-tools, prometheus, nuclei, maru, dagger, malcontent, nfpm, ollama, grafana, mcp-grafana,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dbmate, vcluster, zot, terraform-docs, kwok, gomplate, cilium-cli, terragrunt, minio, melange, conftest, opa, pulumi-language-dotnet, restic, spire-server, trivy, sigstore-scaffolding, kots, terraform-provider-google, k8sgpt, opentelemetry-collector, fulcio,...

GO-2025-4173 vulnerabilities

Vulnerabilities for packages: bento, minio, falcosidekick...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: minio-object-browser, loki, tempo, telegraf, grafana-pyroscope, minio, datadog-agent, istio, keda, aws-otel-collector, cloud-sql-proxy, jaeger, minio-operator, karma, mc, mcp-grafana, trillian, splunk-otel-collector, certificate-transparency, prometheus-pushgateway...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: vexctl, gitsign, kubescape, falcoctl, minio, boring-registry, spire-server, tekton-chains, mc...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: falcoctl, minio, boring-registry, spire-server, mc...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: loki, tempo, minio, datadog-agent, istio, keda, aws-otel-collector, cloud-sql-proxy, k8sgpt, fluent-bit-plugin-loki, jaeger, opentelemetry-collector, minio-operator, prometheus, karma, mc, grafana, trillian, node-problem-detector, amazon-cloudwatch-agent-operator,...

GO-2026-5841 vulnerabilities

Vulnerabilities for packages: containerd, zot, loki, telegraf, minio, spire-server, kots, kaf, kyverno, aactl, snyk-cli, k3d, nerdctl, kine, helm, flux, prometheus-operator, falco-no-driver, k3s...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: minio-object-browser, helm-set-status, aws-sigv4-proxy, podinfo, terraform-docs, wuzz, crossplane-provider-aws-rds, sftpgo-plugin-pubsub, kubeflow-pipelines, gptscript, ghaudit, go-licenses, kubernetes-csi-external-attacher, restic, wave, harbor-registry, wgcf, src,...

CVE-2026-18611

The CVE-2026-18611 entry affects the Data Science Pipelines Operator. The root cause is the use of a cryptographically weak pseudo-random number generator to generate credentials (MariaDB root/user passwords and MinIO access/secret keys). An unauthenticated attacker who can access the MinIO Route...

CVE-2026-18611 Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the...

CVE-2026-18611 Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the...

PT-2026-69956

Name of the Vulnerable Software and Affected Versions Data Science Pipelines Operator affected versions not specified Description A flaw exists where the operator uses a cryptographically weak pseudo-random number generator PRNG—a mathematical algorithm used to generate sequences of numbers that...

CVE-2026-18611: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the...

The vulnerability of the OIDC server of MinIO allows a hacker to escalate their privileges.

The vulnerability of the OIDC server of MinIO is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges...