Vulnerability index

Browse CVEs

22 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Minio HIGH 8.2
CVE-2026-40344

MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authenticat…

Fix: 2026-04-11T03-20-12Z+
Fix from $1,950 2026-04-22
Minio HIGH 8.2
CVE-2026-41145

MinIO is a high-performance object storage system. Starting in RELEASE.2023-05-18T00-05-36Z and prior to RELEASE.2026-04-11T03-20-12Z, an authenticat…

Fix: 2026-04-11T03-20-12Z+
Fix from $1,950 2026-04-22
Minio MEDIUM 6.5
CVE-2026-39414

MinIO is a high-performance object storage system. From RELEASE.2018-08-18T03-49-57Z to before RELEASE.2025-12-20T04-58-37Z, MinIO's S3 Select featur…

Fix: after 2025-10-15t17-29-55z
Fix from $1,600 2026-04-08
Minio HIGH 7.1
CVE-2026-34204

MinIO is a high-performance object storage system. Prior to version RELEASE.2026-03-26T21-24-40Z, a flaw in extractMetadataFromMime() allows any auth…

Fix: 2026-03-26t21-24-40z+
Fix from $1,950 2026-03-31
Minio HIGH 7.5
CVE-2026-33419

MinIO is a high-performance object storage system. Prior to RELEASE.2026-03-17T21-25-16Z, MinIO AIStor's STS (Security Token Service) AssumeRoleWithL…

Fix: 2026-03-17t21-25-16z+
Fix from $1,950 2026-03-24
Minio CRITICAL 9.8
CVE-2026-33322

MinIO is a high-performance object storage system. From RELEASE.2022-11-08T05-27-07Z to before RELEASE.2026-03-17T21-25-16Z, a JWT algorithm confusio…

Fix: 2026-03-17t21-25-16z+
Fix from $2,300 2026-03-24
Minio HIGH 8.8
CVE-2024-24747EPSS 34%

MinIO is a High Performance Object Storage. When someone creates an access key, it inherits the permissions of the parent key. Not only for `s3:*` ac…

Patch available
Fix from $1,950 2024-01-31
Console MEDIUM 5.3
CVE-2023-33955

Minio Console is the UI for MinIO Object Storage. Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename. This issue has…

Fix: 0.28.0+
Fix from $1,600 2023-05-30
Minio HIGH 8.8
CVE-2023-28433

Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are impacted. MinIO fails to filt…

Fix: 2023-03-20t20-16-18z+
Fix from $1,950 2023-03-22
Minio HIGH 8.8
CVE-2023-28434 KEVEPSS 7%

Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucke…

Fix: 2023-03-20t20-16-18z+
Fix from $1,950 2023-03-22
Minio HIGH 7.5
CVE-2023-28432 KEVEPSS 84%

Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T2…

Fix: 2023-03-20t20-16-18z+
Fix from $1,950 2023-03-22
Minio MEDIUM 6.5
CVE-2023-27589

Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE.2020-12-23T02-24-12Z and prior to RELEASE.2023-03-13T19-46-17Z, a user with `c…

Fix: 2023-03-13t19-46-17z+
Fix from $1,600 2023-03-14
Minio HIGH 8.8
CVE-2023-25812

Minio is a Multi-Cloud Object Storage framework. Affected versions do not correctly honor a `Deny` policy on ByPassGoverance. Ideally, minio should r…

Fix: 2023-02-17t17-52-43z+
Fix from $1,950 2023-02-21
Minio HIGH 7.5
CVE-2022-31028

MinIO is a multi-cloud object storage solution. Starting with version RELEASE.2019-09-25T18-25-51Z and ending with version RELEASE.2022-06-02T02-11-0…

Fix: 2022-06-02t02-11-04z+
Fix from $1,950 2022-06-07
Minio HIGH 8.8
CVE-2022-24842

MinIO is a High Performance Object Storage released under GNU Affero General Public License v3.0. A security issue was found where an non-admin user …

Fix: 2022-04-12t06-55-35z+
Fix from $1,950 2022-04-12
Minio HIGH 8.8
CVE-2021-43858EPSS 35%

MinIO is a Kubernetes native application for cloud storage. Prior to version `RELEASE.2021-12-27T07-23-18Z`, a malicious client can hand-craft an HTT…

Fix: 2021-12-27t07-23-18z+
Fix from $1,950 2021-12-27
Minio HIGH 8.8
CVE-2021-41137

Minio is a Kubernetes native application for cloud storage. All users on release `RELEASE.2021-10-10T16-53-30Z` are affected by a vulnerability that …

Patch available
Fix from $1,950 2021-10-13
Minio MEDIUM 5.9
CVE-2021-21390

MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before versio…

Fix: 2021-03-17t02-33-02z+
Fix from $1,600 2021-03-19
Minio MEDIUM 6.5
CVE-2021-21362

MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before versio…

Fix: 2021-03-04t00-53-13z+
Fix from $1,600 2021-03-08
Minio HIGH 7.7
CVE-2021-21287EPSS 25%

MinIO is a High Performance Object Storage released under Apache License v2.0. In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server…

Fix: 2021-01-30t00-20-58z+
Fix from $1,950 2021-02-01
Minio HIGH 7.5
CVE-2020-11012

MinIO versions before RELEASE.2020-04-23T00-58-49Z have an authentication bypass issue in the MinIO admin API. Given an admin access key, it is possi…

Fix: 2020-04-23t00-58-49z+
Fix from $1,950 2020-04-23
Minio HIGH 7.5
CVE-2018-1000538

Minio Inc. Minio S3 server version prior to RELEASE.2018-05-16T23-35-33Z contains a Allocation of Memory Without Limits or Throttling (similar to CWE…

Fix: 2018-05-16t23-35-33z+
Fix from $1,950 2018-06-26