github.com/minio/minio vulnerabilities
CVEs whose affected-version data names the github.com/minio/minio package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-39414HighMinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing
MinIO affected a DoS via Unbounded Memory Allocation in S3 Select CSV Parsing
▾ Twilightminio · github.com/minio/minioEPSS 0.48%via OSV
CVE-2026-34204High· 7.1MinIO is Vulnerable to SSE Metadata Injection via Replication Headers
MinIO is Vulnerable to SSE Metadata Injection via Replication Headers
▾ Twilightminio · github.com/minio/minioEPSS 0.12%via OSV
CVE-2026-33322CriticalMinIO has JWT Algorithm Confusion in OIDC Authentication
MinIO has JWT Algorithm Confusion in OIDC Authentication
▾ Midnightminio · github.com/minio/minioEPSS 0.41%via OSV
CVE-2025-31489HighPoCMinIO performs incomplete signature validation for unsigned-trailer uploads
MinIO performs incomplete signature validation for unsigned-trailer uploads
▾ Midnightminio · github.com/minio/minioEPSS 2.4%via OSV
CVE-2023-28434High· 8.8CISA KEVPoCPrivilege Escalation on Linux/MacOS
Privilege Escalation on Linux/MacOS
▾ Abyssalminio · github.com/minio/minioEPSS 7.9%via OSV