Vulnerability GO-2025-3594
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
April 09, 2025 at 05:05 PM UTC
MinIO performs incomplete signature validation for unsigned-trailer uploads in github.com/minio/minio
<0.0.0-20250403145552-8c70975283f9
<0.0.0-20250403145552-8c70975283f9
Summary
MinIO performs incomplete signature validation for unsigned-trailer uploads in github.com/minio/minio
Details
MinIO performs incomplete signature validation for unsigned-trailer uploads in github.com/minio/minio
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
3 months ago
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint in github.com/minio/minio
>=0.0.0 GO-2026-5757
>=0.0.0 GO-2026-5757
Unknown
3 months ago
MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5415
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5415
Unknown
3 months ago
MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5437
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5437
Unknown
3 months ago
MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads in github.com/minio/minio
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5284
v0.0.0-20260212201848-7aac2a2c5b7c GO-2026-5284
Medium Risk
5 months ago
MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint
>=0.0.0-20220724015452 <0.0.0-20260414213245 GHSA-xh8f-g2qw-gcm7
>=0.0.0-20220724015452 <0.0.0-20260414213245 GHSA-xh8f-g2qw-gcm7
Impacted packages
Timeline
Published
1 year ago
April 09, 2025 at 05:05 PM UTC
Last Modified
2 hours ago
October 08, 2026 at 08:11 AM UTC