golang-github-minio-minio-go (Ubuntu:24.10) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Ubuntu:24.10 package golang-github-minio-minio-go, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2023-28433 — CVSS 8.8 (high): Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are impacted. MinIO…
• CVE-2023-28434 — CVSS 8.8 (high) — actively exploited: Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass…
• CVE-2023-28432 — CVSS 7.5 (high) — actively exploited: Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to…
• CVE-2023-25812 — CVSS 6.5 (medium): Minio is a Multi-Cloud Object Storage framework. Affected versions do not correctly honor a `Deny` policy on ByPassGoverance. Ideally…