Skip to content
OpenAdvisories

Package · Go

github.com/oxyno-zeta/s3-proxy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.4
    CVE-2026-42882

    oxyno-zeta/s3-proxy: Security Issues in Resource Path Matching

    oxyno-zeta/s3-proxy is an aws s3 proxy written in go. Prior to 5.0.0, s3-proxy contains an authentication bypass caused by inconsistent URL path interpretation between the authentication middleware and the bucket handler. The authentication middleware evaluat…

    oxyno-zeta s3-proxy github.com/oxyno-zeta/s3-proxy Go
  • High 8.4
    CVE-2025-27088

    Reflected Cross-site Scripting (XSS) in template implementation in oxyno-zeta/s3-proxy

    oxyno-zeta/s3-proxy is an aws s3 proxy written in go. In affected versions a Reflected Cross-site Scripting (XSS) vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hi…

    oxyno-zeta s3-proxy github.com/oxyno-zeta/s3-proxy github.com/oxyno-zeta/s3-proxy/cmd/s3-proxy Go