Vulnerabilities

Last updated 1 hour ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/minio/minio MinIO has JWT Algorithm Confusion in OIDC Authentication Critical 9.5 6 months ago 3 hours ago
github.com/minio/minio MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads High Risk 8.2 5 months ago 3 hours ago
github.com/minio/minio MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing High Risk 8.0 6 months ago 3 hours ago
github.com/minio/minio MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS High Risk 8.1 11 months ago 3 hours ago
github.com/minio/minio Minio vulnerable to Privilege Escalation on Windows via Path separator manipulation High Risk 8.8 3 years ago 3 hours ago
github.com/minio/minio MinIO is Vulnerable to Privilege Escalation via Session Policy Bypass in Service Accounts and STS in github.com/minio/minio Unknown 11 months ago 3 hours ago
github.com/minio/minio MinIO has JWT Algorithm Confusion in OIDC Authentication in github.com/minio/minio Unknown 6 months ago 3 hours ago
github.com/minio/minio MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads in github.com/minio/minio Unknown 3 months ago 3 hours ago
github.com/minio/minio MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing in github.com/minio/minio Unknown 3 months ago 3 hours ago
github.com/minio/minio Privilege Escalation on Linux/MacOS High Risk 8.8 3 years ago 3 hours ago
github.com/minio/minio MinIO is Vulnerable to SSE Metadata Injection via Replication Headers High Risk 7.1 6 months ago 3 hours ago
github.com/minio/minio MinIO information disclosure vulnerability Medium Risk 5.3 2 years ago 3 hours ago
github.com/minio/minio MinIO vulnerable to privilege escalation in IAM import API High Risk 8.0 1 year ago 3 hours ago
github.com/minio/minio MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads High Risk 8.2 5 months ago 3 hours ago
github.com/minio/minio MinIO LDAP login brute-force via user enumeration and missing rate limit Critical 9.5 6 months ago 3 hours ago
github.com/minio/minio MinIO allows an SFTP authentication bypass due to improperly trusted SSH key Medium Risk 6.0 1 year ago 3 hours ago
github.com/minio/minio MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint Medium Risk 4.9 5 months ago 3 hours ago
github.com/minio/minio Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation High Risk 8.8 2 years ago 3 hours ago
github.com/minio/minio Minio unsafe default: Access keys inherit `admin` of root user, allowing privilege escalation in github.com/minio/minio Unknown 2 years ago 3 hours ago
github.com/minio/minio MinIO information disclosure vulnerability in github.com/minio/minio Unknown 2 years ago 3 hours ago
github.com/minio/minio MinIO vulnerable to privilege escalation in IAM import API in github.com/minio/minio Unknown 1 year ago 3 hours ago
github.com/minio/minio MinIO SFTP authentication bypass due to improperly trusted SSH key in github.com/minio/minio Unknown 1 year ago 3 hours ago
github.com/minio/minio MinIO LDAP login brute-force via user enumeration and missing rate limit in github.com/minio/minio Unknown 6 months ago 3 hours ago
github.com/minio/minio MinIO is Vulnerable to SSE Metadata Injection via Replication Headers in github.com/minio/minio Unknown 6 months ago 3 hours ago
github.com/minio/minio MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads in github.com/minio/minio Unknown 3 months ago 3 hours ago
github.com/minio/minio MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint in github.com/minio/minio Unknown 3 months ago 3 hours ago
github.com/minio/minio MinIO performs incomplete signature validation for unsigned-trailer uploads High Risk 8.0 1 year ago 3 hours ago
github.com/minio/minio MinIO performs incomplete signature validation for unsigned-trailer uploads in github.com/minio/minio Unknown 1 year ago 3 hours ago