GHSA-5CX5-WH4M-82FH vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

GHSA-9C4Q-HQ6P-C237 vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Tuzitio Camaleon_Cms

HTB Facts — Full Writeup Difficulty: Medium OS: Lin...

CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: datadog-agent, istio, node-problem-detector, amazon-cloudwatch-agent-operator, k8sgpt, fluent-bit-plugin-loki, cloud-sql-proxy, metrics-server, tempo, jaeger, karma, prometheus-operator, mc, minio, loki, minio-operator, keda, trillian, grafana, opentelemetry-collecto...

GHSA-WG65-39GG-5WFJ vulnerabilities

Vulnerabilities for packages: datadog-agent, istio, node-problem-detector, amazon-cloudwatch-agent-operator, k8sgpt, fluent-bit-plugin-loki, cloud-sql-proxy, metrics-server, tempo, jaeger, karma, prometheus-operator, mc, minio, loki, minio-operator, keda, trillian, grafana, opentelemetry-collecto...

CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: keda, minio-operator-fips, grafana, grafana-fips, fluent-bit-plugin-loki, mc, aws-otel-collector-fips, commercial-grafana, metrics-server, karma-fips, keda-fips, trillian, minio-operator, minio, istio-fips, agentbeat-fips, datadog-agent, cloudzero-agent, trillian-fip...

GHSA-WG65-39GG-5WFJ vulnerabilities

Vulnerabilities for packages: keda, minio-operator-fips, grafana, grafana-fips, fluent-bit-plugin-loki, mc, aws-otel-collector-fips, commercial-grafana, metrics-server, karma-fips, keda-fips, trillian, minio-operator, minio, istio-fips, agentbeat-fips, datadog-agent, cloudzero-agent, trillian-fip...

Malicious code in noteparse (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270d4c797fe34bc0b9598608f45add8721f1fa80d1488e4fae750e3a7b38419e noteparse 1.1.27 ships live MinIO credentials in configReader.py endpoint uicfile.uniview.com, accesskey 'uicpro', secretkey 'uicpropass123' that are...

MAL-2026-4813 Malicious code in noteparse (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270d4c797fe34bc0b9598608f45add8721f1fa80d1488e4fae750e3a7b38419e noteparse 1.1.27 ships live MinIO credentials in configReader.py endpoint uicfile.uniview.com, accesskey 'uicpro', secretkey 'uicpropass123' that are...

CVE-2026-42154 vulnerabilities

Vulnerabilities for packages: datadog-agent, istio, node-problem-detector, amazon-cloudwatch-agent-operator, k8sgpt, fluent-bit-plugin-loki, cloud-sql-proxy, metrics-server, tempo, jaeger, karma, prometheus-operator, mc, minio, loki, minio-operator, splunk-otel-collector, keda, trillian, grafana,...

GHSA-8RM2-7QQF-34QM vulnerabilities

Vulnerabilities for packages: datadog-agent, istio, node-problem-detector, amazon-cloudwatch-agent-operator, k8sgpt, fluent-bit-plugin-loki, cloud-sql-proxy, metrics-server, tempo, jaeger, karma, prometheus-operator, mc, minio, loki, minio-operator, splunk-otel-collector, keda, trillian, grafana,...

CVE-2026-42600 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-XH8F-G2QW-GCM7 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-8RM2-7QQF-34QM vulnerabilities

Vulnerabilities for packages: keda, minio-operator-fips, grafana, grafana-fips, fluent-bit-plugin-loki, mc, aws-otel-collector-fips, commercial-grafana, metrics-server, karma-fips, keda-fips, trillian, minio-operator, minio, istio-fips, splunk-otel-collector-fips, agentbeat-fips, datadog-agent,...

CVE-2026-42154 vulnerabilities

Vulnerabilities for packages: keda, minio-operator-fips, grafana, grafana-fips, fluent-bit-plugin-loki, mc, aws-otel-collector-fips, commercial-grafana, metrics-server, karma-fips, keda-fips, trillian, minio-operator, minio, istio-fips, splunk-otel-collector-fips, agentbeat-fips, datadog-agent,...

CVE-2026-42600 vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

GHSA-XH8F-G2QW-GCM7 vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

CLEANSTART-2026-SE34232 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-40179, CVE-2026-42499, CVE-2026-42501, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-p436-gjf2-799p applied in versions: 7.1.1-r10, 7.1.1-r7, 7.1.1-r8, 7.1.1-r9

Multiple security vulnerabilities affect the minio-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

Authentication Bypass

github.com/minio/minio is vulnerable to an Authentication Bypass. The vulnerability is due to improper signature verification in the STREAMING-UNSIGNED-PAYLOAD-TRAILER code path, which allows an attacker with knowledge of a valid access key to bypass authentication by supplying credentials throug...

Authentication Bypass

MinIO is vulnerable to Authentication Bypass. The vulnerability is due to missing signature verification for authTypeStreamingUnsignedTrailer requests in the Snowball auto-extract handler, which allows an attacker with knowledge of a valid access key to upload arbitrary objects without providing ...