Skip to content
OpenAdvisories

Package · Go

github.com/minio/operator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2025-32963

    Minio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS

    MinIO Operator STS is a native IAM Authentication for Kubernetes. Prior to version 7.1.0, if no audiences are provided for the `spec.audiences` field, the default will be of the Kubernetes apiserver. Without scoping, it can be replayed to other internal syste…

    minio operator github.com/minio/operator Go