Browse CVEs

HIGH 8.2 CVE-2026-40344 MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authenticat… Minio 2026-04-11T03-20-12Z+ Fix from $1,9502026-04-22 HIGH 8.2 CVE-2026-41145 MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authenticat… Minio 2026-04-11T03-20-12Z+ Fix from $1,9502026-04-22 MEDIUM 6.5 CVE-2026-39414 MinIO is a high-performance object storage system. From RELEASE.2018-08-18T03-49-57Z to before RELEASE.2025-12-20T04-58-37Z, MinIO's S3 Select featur… Minio after 2025-10-15t17-29-55z Fix from $1,6002026-04-08 HIGH 7.1 CVE-2026-34204 MinIO is a high-performance object storage system. Prior to version RELEASE.2026-03-26T21-24-40Z, a flaw in extractMetadataFromMime() allows any auth… Minio 2026-03-26t21-24-40z+ Fix from $1,9502026-03-31 HIGH 7.5 CVE-2026-33419 MinIO is a high-performance object storage system. Prior to RELEASE.2026-03-17T21-25-16Z, MinIO AIStor's STS (Security Token Service) AssumeRoleWithL… Minio 2026-03-17t21-25-16z+ Fix from $1,9502026-03-24 CRITICAL 9.8 CVE-2026-33322 MinIO is a high-performance object storage system. From RELEASE.2022-11-08T05-27-07Z to before RELEASE.2026-03-17T21-25-16Z, a JWT algorithm confusio… Minio 2026-03-17t21-25-16z+ Fix from $2,3002026-03-24 HIGH 8.8 CVE-2024-24747EPSS 34% MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for `s3:*` ac… Minio Patch available Fix from $1,9502024-01-31 MEDIUM 5.3 CVE-2023-33955 Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This issue has… Console 0.28.0+ Fix from $1,6002023-05-30 HIGH 8.8 CVE-2023-28433 Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are impacted. MinIO fails to filt… Minio 2023-03-20t20-16-18z+ Fix from $1,9502023-03-22 HIGH 8.8 CVE-2023-28434 KEVEPSS 7% Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucke… Minio 2023-03-20t20-16-18z+ Fix from $1,9502023-03-22 HIGH 7.5 CVE-2023-28432 KEVEPSS 84% Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T2… Minio 2023-03-20t20-16-18z+ Fix from $1,9502023-03-22 MEDIUM 6.5 CVE-2023-27589 Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE.2020-12-23T02-24-12Z and prior to RELEASE.2023-03-13T19-46-17Z, a user with `c… Minio 2023-03-13t19-46-17z+ Fix from $1,6002023-03-14 HIGH 8.8 CVE-2023-25812 Minio is a Multi-Cloud Object Storage framework. Affected versions do not correctly honor a `Deny` policy on ByPassGoverance. Ideally, minio should r… Minio 2023-02-17t17-52-43z+ Fix from $1,9502023-02-21 HIGH 7.5 CVE-2022-31028 MinIO is a multi-cloud object storage solution. Starting with version RELEASE.2019-09-25T18-25-51Z and ending with version RELEASE.2022-06-02T02-11-0… Minio 2022-06-02t02-11-04z+ Fix from $1,9502022-06-07 HIGH 8.8 CVE-2022-24842 MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was found where an non-admin user … Minio 2022-04-12t06-55-35z+ Fix from $1,9502022-04-12 HIGH 8.8 CVE-2021-43858EPSS 35% MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-craft an HTT… Minio 2021-12-27t07-23-18z+ Fix from $1,9502021-12-27 HIGH 8.8 CVE-2021-41137 Minio is a Kubernetes native application for cloud storage. All users on release `RELEASE.2021-10-10T16-53-30Z` are affected by a vulnerability that … Minio Patch available Fix from $1,9502021-10-13 MEDIUM 5.9 CVE-2021-21390 MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before versio… Minio 2021-03-17t02-33-02z+ Fix from $1,6002021-03-19 MEDIUM 6.5 CVE-2021-21362 MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before versio… Minio 2021-03-04t00-53-13z+ Fix from $1,6002021-03-08 HIGH 7.7 CVE-2021-21287EPSS 25% MinIO is a High Performance Object Storage released under Apache License v2.0. In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server… Minio 2021-01-30t00-20-58z+ Fix from $1,9502021-02-01 HIGH 7.5 CVE-2020-11012 MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API. Given an admin access key, it is possi… Minio 2020-04-23t00-58-49z+ Fix from $1,9502020-04-23 HIGH 7.5 CVE-2018-1000538 Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE… Minio 2018-05-16t23-35-33z+ Fix from $1,9502018-06-26