CVE-2026-39414

MinIO is a high-performance object storage system. From RELEASE.2018-08-18T03-49-57Z to before RELEASE.2025-12-20T04-58-37Z, MinIO's S3 Select feature is vulnerable to memory exhaustion when processing CSV files containing lines longer than available memory. The CSV reader's nextSplit function...

GHSA-5CX5-WH4M-82FH vulnerabilities

Vulnerabilities for packages: minio...

GHSA-9C4Q-HQ6P-C237 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-33322 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-40344 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-40344 vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

CVE-2026-33322 vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

GHSA-5CX5-WH4M-82FH vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

GHSA-9C4Q-HQ6P-C237 vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Tuzitio Camaleon_Cms

HTB Facts — Full Writeup Difficulty: Medium OS: Lin...

CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, metrics-server, datadog-agent, keda, loki, prometheus-pushgateway, mc, amazon-cloudwatch-agent-operator, prometheus-operator, opentelemetry-collector, fluent-bit-plugin-loki, istio, minio, jaeger, tempo, trillian, node-problem-detector, k8sgpt,...

GHSA-WG65-39GG-5WFJ vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, metrics-server, datadog-agent, keda, loki, prometheus-pushgateway, mc, amazon-cloudwatch-agent-operator, prometheus-operator, opentelemetry-collector, fluent-bit-plugin-loki, istio, minio, jaeger, tempo, trillian, node-problem-detector, k8sgpt,...

CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, grafana, minio-operator, prometheus-operator-fips, metrics-server, ld-relay-fips, minio-fips, aws-otel-collector-fips, aws-otel-collector, cloud-sql-proxy, elastic-agent-fips, prometheus-fips, opentelemetry-collector-fips, istio,...

GHSA-WG65-39GG-5WFJ vulnerabilities

Vulnerabilities for packages: amazon-cloudwatch-agent-operator, grafana, minio-operator, prometheus-operator-fips, metrics-server, ld-relay-fips, minio-fips, aws-otel-collector-fips, aws-otel-collector, cloud-sql-proxy, elastic-agent-fips, prometheus-fips, opentelemetry-collector-fips, istio,...

MAL-2026-4813 Malicious code in noteparse (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270d4c797fe34bc0b9598608f45add8721f1fa80d1488e4fae750e3a7b38419e noteparse 1.1.27 ships live MinIO credentials in configReader.py endpoint uicfile.uniview.com, accesskey 'uicpro', secretkey 'uicpropass123' that are...

Malicious code in noteparse (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 270d4c797fe34bc0b9598608f45add8721f1fa80d1488e4fae750e3a7b38419e noteparse 1.1.27 ships live MinIO credentials in configReader.py endpoint uicfile.uniview.com, accesskey 'uicpro', secretkey 'uicpropass123' that are...

CVE-2026-42154 vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, metrics-server, datadog-agent, keda, loki, prometheus-pushgateway, mc, amazon-cloudwatch-agent-operator, prometheus-operator, opentelemetry-collector, fluent-bit-plugin-loki, istio, grafana, minio, jaeger, tempo, trillian, node-problem-detector,...

GHSA-XH8F-G2QW-GCM7 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-8RM2-7QQF-34QM vulnerabilities

Vulnerabilities for packages: cloud-sql-proxy, metrics-server, datadog-agent, keda, loki, prometheus-pushgateway, mc, amazon-cloudwatch-agent-operator, prometheus-operator, opentelemetry-collector, fluent-bit-plugin-loki, istio, grafana, minio, jaeger, tempo, trillian, node-problem-detector,...

CVE-2026-42600 vulnerabilities

Vulnerabilities for packages: minio...