Package impact
Go / github.com/minio/minio
| CVE | Severity | CVSS | Risk | Published | Description | Impact |
|---|---|---|---|---|---|---|
| CVE-2026-41145 | high | 8.2 | 8.2 | 1mo ago | MinIO has an Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads | |
| CVE-2026-40344 | high | 8.2 | 8.2 | 1mo ago | MinIO has an Unauthenticated Object Write via Missing Signature Verification in Unsigned-Trailer Uploads | |
| CVE-2026-42600 | medium | 4.9 | 4.9 | 16d ago | MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint |