813 matches found
MinIO Operator Console Authentication Bypass
MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...
MinIO Browser API - Server-Side Request Forgery
MinIO Browser API before version RELEASE.2021-01-30T00-20-58Z contains a server-side request forgery vulnerability. id: CVE-2021-21287 info: name: MinIO Browser API - Server-Side Request Forgery author: pikpikcu severity: high description: MinIO Browser API before version...
MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads
MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. The signature component of the authorization may be invalid, which would mean that as a client you can use any arbitrary secret to upload objects given the user already has prior WRITE permissions on...
MinIO Cluster Deployment - Information Disclosure
MinIO is susceptible to information disclosure. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z, MinIO returns all environment variables, including MINIOSECRETKEY and MINIOROOTPASSWORD. An attacker can potentially obtain sensitive...
GO-2026-6107 vulnerabilities
Vulnerabilities for packages: multicluster-controlplane, kine, cilium-cli, cert-manager, multicluster-controlplane-fips, reports-server, hubble, minio, rancher-support-bundle-kit, milvus, dapr, kyverno, external-dns, loki, kots, cilium...
GO-2026-6107 vulnerabilities
Vulnerabilities for packages: dapr, external-dns, kine, cert-manager, hubble, kots, cilium, kyverno, loki, minio, cilium-cli...
GHSA-6VCH-Q96H-7GC3 vulnerabilities
Vulnerabilities for packages: dapr, external-dns, kine, cert-manager, hubble, kots, cilium, kyverno, loki, minio, cilium-cli...
CVE-2026-73500 vulnerabilities
Vulnerabilities for packages: dapr, external-dns, kine, cert-manager, hubble, kots, cilium, kyverno, loki, minio, cilium-cli...
GO-2026-4779 vulnerabilities
Vulnerabilities for packages: minio-fips, minio...
GO-2025-4034 vulnerabilities
Vulnerabilities for packages: minio...
GO-2024-2886 vulnerabilities
Vulnerabilities for packages: minio...
GO-2026-5284 vulnerabilities
Vulnerabilities for packages: minio-fips, minio...
GO-2026-5415 vulnerabilities
Vulnerabilities for packages: minio-fips, minio...
GO-2026-5437 vulnerabilities
Vulnerabilities for packages: minio-fips, minio...
GO-2026-4803 vulnerabilities
Vulnerabilities for packages: minio...
GO-2026-4896 vulnerabilities
Vulnerabilities for packages: minio...
GO-2026-5757 vulnerabilities
Vulnerabilities for packages: minio-fips, minio...
GO-2023-2163 vulnerabilities
Vulnerabilities for packages: nats-server, nats, k3s, minio...