Skip to content
OpenAdvisories

Vendor

Robothy

1 known vulnerabilities.

Products

local-s3 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2025-27136 Public exploit

    LocalS3 CreateBucketConfiguration Endpoint XML External Entity (XXE) Injection

    LocalS3 is an Amazon S3 mock service for testing and local development. Prior to version 1.21, the LocalS3 service's bucket creation endpoint is vulnerable to XML External Entity (XXE) injection. When processing the CreateBucketConfiguration XML document duri…

    Robothy local-s3 io.github.robothy:local-s3-rest Maven