EUVD-2021-8679

Malicious code in bioql PyPI...

EUVD-2025-9731

Malicious code in bioql PyPI...

EUVD-2022-38786

Malicious code in bioql PyPI...

EUVD-2021-8692

Malicious code in bioql PyPI...

EUVD-2023-29705

Malicious code in bioql PyPI...

PT-2026-37613

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The ceph zero partial object function lacks the proper snapshot context for its OSD write operations. This deficiency can result in data inconsistencies within snapshots. Recommendations...

The vulnerability of the MinIO object storage server, related to errors in verifying the cryptographic signature, allows an attacker to compromise the integrity of the protected information.

The vulnerability of the MinIO object storage server is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the integrity of the protected information...

CVE-2025-57682

Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary files from an S3 bucket through its CloudFront distribution via the "POST /api/file/s3/get-presigned-get-url-proxy" API...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: ctop, addon-resizer, vexctl, container-object-storage-interface, git-lfs, grafana-operator, kserve-rest-proxy, vault-benchmark, shfmt, dagdotdev, checksec, php-fpmexporter, confluent-common-docker, nats, gitsign, sftpgo-plugin-pubsub, docker-credential-ecr-login,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: memcached-exporter-fips, secrets-store-csi-driver-provider-aws, knative-serving, vault-benchmark, terraform-provider-sendgrid-fips, blob-csi-fips, nvidia-nsight-compute-12.8, kube-vip, etcd-fips, prometheus-adapter, terraform-provider-time, pvc-autoresizer, nemo,...

An Inside Look at our Next Gen Object Storage Launch

...

Linux Distros Unpatched Vulnerability : CVE-2021-39900

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure from SendEntry in GitLab starting with 10.8 allowed exposure of full URL of artifacts stored in object-storage with a temporary...

Malicious code in object-storage-service (npm)

The package object-storage-service was found to contain malicious code...

MAL-2025-28044 Malicious code in object-storage-service (npm)

The package object-storage-service was found to contain malicious code...

MAL-2025-34706 Malicious code in tencentcloud-cos-sdk-react-native (npm)

The package tencentcloud-cos-sdk-react-native was found to contain malicious code...

Security Bulletin: Vulnerability with spring-security-crypto and jinja affect IBM Cloud Object Storage Systems (July 2025)

Summary Vulnerability with spring-security-crypto CVE-2025-22228 and jinja CVE-2025-27516 . This vulnerability has been addressed in the latest ClevOS release. Vulnerability Details CVEID:CVE-2025-22228 DESCRIPTION: BCryptPasswordEncoder.matchesCharSequence,String will incorrectly return true for...

Virtuozzo Hybrid Infrastructure 7.0 (7.0.0-250)

In this release, Virtuozzo Hybrid Infrastructure provides a range of new features that cover the compute service, object and core storage, networking, as well as monitoring and alerts. Additionally, this release delivers stability improvements and addresses issues found in previous releases...

VulnCheck KEV: CVE-2024-48914

Vendure is an open-source headless commerce platform. Prior to versions 3.0.5 and 2.3.3, a vulnerability in Vendure's asset server plugin allows an attacker to craft a request which is able to traverse the server file system and retrieve the contents of arbitrary files, including sensitive data...

FreeScout Security Bypass Vulnerability (CNVD-2025-20796)

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability that is caused by incorrect configuration of the root folder of the object Storage. An attacker could exploit the...

FreeScout 安全漏洞

FreeScout is an ultra-lightweight free open source helpdesk and shared inbox built using PHP Laravel framework by FreeScout. FreeScout suffers from a security bypass vulnerability that is caused by incorrect configuration of the root folder of the object Storage. An attacker could exploit the...