[ Vendor · 5 CVEs ]
MinIO
CVEs affecting MinIO published in the last 30 days, plus any MinIO CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-97731 | 25 Sep 2026 | CVSS 7.1 | MinIOMinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Amz-SignedHeaders list… | |
| CVE-2023-28432 | 22 Mar 2023 | CVSS 7.5 | MinIO Information DisclosureMinio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to… | Exploited |
| CVE-2023-28432 | 22 Mar 2023 | CVSS 7.5 | MinIO Information DisclosureMinio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to… | Exploited |
| CVE-2023-28434 | 22 Mar 2023 | CVSS 8.8 | MinIO Security Feature BypassMinio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata… | ExploitedFix |
| CVE-2023-28434 | 22 Mar 2023 | CVSS 8.8 | MinIO Security Feature BypassMinio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata… | ExploitedFix |