Skip to content
OpenAdvisories

Package · Maven

io.github.robothy:local-s3-rest

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium —
    GHSA-47qw-ccjm-9c2c

    LocalS3 XML Parser Vulnerable to XML External Entity (XXE) Injection

    ## Description The LocalS3 project, which implements an S3-compatible storage interface, contains a critical XML External Entity (XXE) Injection vulnerability in its XML parsing functionality. When processing XML requests for multipart upload operations, the …

    io.github.robothy:local-s3-rest Maven
  • Medium —
    GHSA-v232-254c-m6p7

    LocalS3 Project Vulnerable to XML External Entity (XXE) Injection via Bucket Tagging API

    ## Description The LocalS3 project, an S3-compatible storage service, is vulnerable to XML External Entity (XXE) injection through its bucket tagging API. The vulnerability exists because the application processes XML input without properly disabling external…

    io.github.robothy:local-s3-rest Maven
  • Medium —
    GHSA-2466-4485-4pxj

    LocalS3 Project Bucket Operations Vulnerable to XML External Entity (XXE) Injection

    ## Description The LocalS3 project contains an XML External Entity (XXE) Injection vulnerability in its bucket operations that process XML data. Specifically, the vulnerability exists in the bucket ACL and bucket tagging operations. The application processes …

    io.github.robothy:local-s3-rest Maven
  • Medium 5.5
    CVE-2025-27136 Public exploit

    LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection

    LocalS3 is an Amazon S3 mock service for testing and local development. Prior to version 1.21, the LocalS3 service's bucket creation endpoint is vulnerable to XML External Entity (XXE) injection. When processing the CreateBucketConfiguration XML document duri…

    Robothy local-s3 io.github.robothy:local-s3-rest Maven