Apache CloudStack 安全漏洞

Apache CloudStack is an IaaS cloud computing platform developed by the Apache Foundation in the United States. This platform is primarily used for deploying and managing large-scale virtual machine networks. There is a security vulnerability in Apache CloudStack, which stems from the lack of MinI...

GHSA-FW8G-CG8F-9J28 vulnerabilities

Vulnerabilities for packages: minio-object-browser, trillian, keda, telegraf, mc, splunk-otel-collector, tempo, opentelemetry-collector-contrib, opentelemetry-collector, metrics-server, node-problem-detector, prometheus-pushgateway, minio-operator, fluent-bit-plugin-loki, aws-otel-collector,...

MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint

Impact What kind of vulnerability is it? Who is impacted? A path traversal vulnerability in MinIO's ReadMultiple internode storage-REST endpoint allows a caller holding the cluster root JWT to read files from outside the configured drive roots, bounded only by the MinIO process UID...

Directory Traversal

Overview github.com/minio/minio/cmd is an open source object storage server compatible with Amazon S3 APIs. Affected versions of this package are vulnerable to Directory Traversal via the ReadMultiple process. An attacker can access files outside the intended directory by sending a specially...

GHSA-XH8F-G2QW-GCM7 MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint

Impact What kind of vulnerability is it? Who is impacted? A path traversal vulnerability in MinIO's ReadMultiple internode storage-REST endpoint allows a caller holding the cluster root JWT to read files from outside the configured drive roots, bounded only by the MinIO process UID...

CVE-2026-34204 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-JV87-32HW-HH99 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-33419 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-3RH2-V3GR-35P9 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-JV87-32HW-HH99 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-34204 vulnerabilities

Vulnerabilities for packages: minio...

CVE-2026-33419 vulnerabilities

Vulnerabilities for packages: minio...

GHSA-3RH2-V3GR-35P9 vulnerabilities

Vulnerabilities for packages: minio...

PT-2026-37272

Name of the Vulnerable Software and Affected Versions MinIO versions RELEASE.2022-07-24T01-54-52Z through RELEASE.2025-09-07T16-13-09Z Description A path traversal issue in the ReadMultiple internode storage-REST endpoint allows an attacker with the cluster root JWT to read files outside the...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: teleport, telegraf, ratify, kyverno, cert-manager-csi-driver, flux, external-secrets-operator, cert-manager-cmctl, harbor, sftpgo-plugin-auth, terraform, rancher, yunikorn-k8shim, gitlab-runner, percona-server-mongodb-operator, k6, kyverno-notation-aws, gitea,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: teleport, telegraf, ratify, kyverno, cert-manager-csi-driver, flux, external-secrets-operator, cert-manager-cmctl, harbor, sftpgo-plugin-auth, terraform, rancher, yunikorn-k8shim, gitlab-runner, percona-server-mongodb-operator, k6, kyverno-notation-aws, gitea,...

CVE-2026-32952 vulnerabilities

Vulnerabilities for packages: ratify-fips, ldap2pg, cert-manager-google-cas-issuer, terraform-fips, dex, commercial-grafana, terraform, cert-manager-istio-csr-fips, flux-source-controller, seaweedfs, trufflehog, flux, gitea, percona-server-mongodb-operator, kyverno, ratify, opentofu, rclone-fips,...

GHSA-PJCQ-XVWQ-HHPJ vulnerabilities

Vulnerabilities for packages: ratify-fips, ldap2pg, cert-manager-google-cas-issuer, terraform-fips, dex, commercial-grafana, terraform, cert-manager-istio-csr-fips, flux-source-controller, seaweedfs, trufflehog, flux, gitea, percona-server-mongodb-operator, kyverno, ratify, opentofu, rclone-fips,...

BIT-MINIO-2026-41145 MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads

MinIO is a high-performance object storage system. Starting in 2023.05.18 and prior to 2026.04.11, an authentication bypass vulnerability in MinIO's STREAMING-UNSIGNED-PAYLOAD-TRAILER code path allows any user who knows a valid access key to write arbitrary objects to any bucket without knowing t...

BIT-MINIO-2026-40344 MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads

MinIO is a high-performance object storage system. Starting in 2023.05.18 and prior to 2026.04.11, an authentication bypass vulnerability in MinIO's Snowball auto-extract handler PutObjectExtractHandler allows any user who knows a valid access key to write arbitrary objects to any bucket without...