EUVD-2021-8692

Malicious code in bioql PyPI...

EUVD-2022-3554

Malicious code in bioql PyPI...

EUVD-2022-4873

Malicious code in bioql PyPI...

EUVD-2022-38786

Malicious code in bioql PyPI...

EUVD-2025-9731

Malicious code in bioql PyPI...

EUVD-2024-3540

Malicious code in bioql PyPI...

EUVD-2022-3858

Malicious code in bioql PyPI...

EUVD-2024-3356

Malicious code in bioql PyPI...

EUVD-2023-30262

Malicious code in bioql PyPI...

PT-2026-37613

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ceph zero partial object function lacks the proper snapshot context for its OSD write operations. This deficiency can result in data inconsistencies within snapshots. Recommendations...

The vulnerability of the MinIO object storage server, related to errors in verifying the cryptographic signature, allows an attacker to compromise the integrity of the protected information.

The vulnerability of the MinIO object storage server is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

CVE-2025-57682

Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary files from an S3 bucket through its CloudFront distribution via the "POST /api/file/s3/get-presigned-get-url-proxy" API...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: vault-k8s, kserve-rest-proxy, kube-vip-cloud-provider, blobfuse2, bank-vaults, hivemind, vault-benchmark, dagdotdev, k8sgpt-operator, octo-sts, linkerd2-proxy-init, ctop, vexctl, local-path-provisioner, sftpgo-plugin-geoipfilter, custom-pod-autoscaler-operator,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: rancher-machine, sftpgo-plugin-pubsub, kube-vip-cloud-provider, knative-eventing-fips, nvidia-nsight-compute-12.9, vault-benchmark, kserve-rest-proxy, eks-distro-fips, openbao-k8s-fips, pvc-autoresizer, hivemind, kube-logging-operator-custom-runner-fips, yace-fips,...

An Inside Look at our Next Gen Object Storage Launch

...

Linux Distros Unpatched Vulnerability : CVE-2021-39900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary...

Malicious code in object-storage-service (npm)

The package object-storage-service was found to contain malicious code...

MAL-2025-28044 Malicious code in object-storage-service (npm)

The package object-storage-service was found to contain malicious code...

MAL-2025-34706 Malicious code in tencentcloud-cos-sdk-react-native (npm)

The package tencentcloud-cos-sdk-react-native was found to contain malicious code...

Security Bulletin: Vulnerability with spring-security-crypto and jinja affect IBM Cloud Object Storage Systems (July 2025)

Summary Vulnerability with spring-security-crypto CVE-2025-22228 and jinja CVE-2025-27516 . This vulnerability has been addressed in the latest ClevOS release. Vulnerability Details CVEID:CVE-2025-22228 DESCRIPTION: BCryptPasswordEncoder.matchesCharSequence,String will incorrectly return true for...