Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
rigin validation in the client-side code that handles window.postMessage events. A malicious website can send forged messages to the embedding page, causing the victim’s browser to execute arbitrary GraphQL queries or mutations against their GraphQL server while authenticated with the victim’s cookies. This issue has been patched in Apollo Sandbox version 2.7.2 and Apollo Explorer version 3.7.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/apollographql/embeddable-explorer/security/advisories/GHSA-w87v-7w53-wwxv
CVE ID: CVE-2025-59876 State: REJECTED Published: N/A Last Updated: 2025-09-23T02:55:10.413Z Description: No description available.
CVE ID: CVE-2025-59877 State: REJECTED Published: N/A Last Updated: 2025-09-23T02:55:09.936Z Description: No description available.
CVE ID: CVE-2025-59878 State: REJECTED Published: N/A Last Updated: 2025-09-23T02:55:09.472Z Description: No description available.
CVE ID: CVE-2025-59879 State: REJECTED Published: N/A Last Updated: 2025-09-23T02:55:08.997Z Description: No description available.
CVE ID: CVE-2025-59880 State: REJECTED Published: N/A Last Updated: 2025-09-23T02:55:08.397Z Description: No description available.
CVE ID: CVE-2025-59881 State: REJECTED Published: N/A Last Updated: 2025-09-23T02:55:07.903Z Description: No description available.
CVE ID: CVE-2025-59882 State: REJECTED Published: N/A Last Updated: 2025-09-23T02:55:07.459Z Description: No description available.
CVE ID: CVE-2025-59883 State: REJECTED Published: N/A Last Updated: 2025-09-23T02:55:06.946Z Description: No description available.
CVE ID: CVE-2025-59884 State: REJECTED Published: N/A Last Updated: 2025-09-23T02:55:06.464Z Description: No description available.
CVE ID: CVE-2025-59885 State: REJECTED Published: N/A Last Updated: 2025-09-23T02:55:05.903Z Description: No description available.
CVE ID: CVE-2025-59889 State: PUBLISHED Published: 2025-10-14T05:11:27.086Z Last Updated: 2025-11-04T10:46:04.913Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: Eaton Products: Eaton IPP software Problem Types: CWE-427 Description: Improper authentication of library files in the Eaton IPP software installer could lead to arbitrary code execution of an attacker with the access to the software package. This security issue has been fixed in the latest version of IPP which is available on the Eaton download center. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security
ISA ADP Vulnrichment: References: - https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/etn-va-2025-1009.pdf
CVE ID: CVE-2025-59921 State: PUBLISHED Published: 2025-10-14T15:23:42.754Z Last Updated: 2025-10-14T17:35:30.510Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:X/RC:C) Vendors: Fortinet Products: FortiADC Problem Types: CWE-200 Description: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiADC version 7.4.0, version 7.2.3 and below, version 7.1.4 and below, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to obtain sensitive data via crafted HTTP or HTTPs requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-23-434
CVE ID: CVE-2025-59924 State: REJECTED Published: N/A Last Updated: 2025-09-24T02:55:08.926Z Description: No description available.
CVE ID: CVE-2025-59925 State: REJECTED Published: N/A Last Updated: 2025-09-24T02:55:08.465Z Description: No description available.
CVE ID: CVE-2025-59926 State: REJECTED Published: N/A Last Updated: 2025-09-24T02:55:07.852Z Description: No description available.
CVE ID: CVE-2025-59927 State: REJECTED Published: N/A Last Updated: 2025-09-24T02:55:07.355Z Description: No description available.
CVE ID: CVE-2025-59928 State: REJECTED Published: N/A Last Updated: 2025-09-24T02:55:06.865Z Description: No description available.
CVE ID: CVE-2025-59929 State: REJECTED Published: N/A Last Updated: 2025-09-24T02:55:06.381Z Description: No description available.
CVE ID: CVE-2025-59930 State: REJECTED Published: N/A Last Updated: 2025-09-24T02:55:05.700Z Description: No description available.
CVE ID: CVE-2025-59932 State: PUBLISHED Published: 2025-09-27T00:51:01.805Z Last Updated: 2025-09-29T14:13:59.722Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: FlagForgeCTF Products: flagForge Problem Types: CWE-284 Description: Flag Forge is a Capture The Flag (CTF) platform. From versions 2.0.0 to before 2.3.1, the /api/resources endpoint previously allowed POST and DELETE requests without proper authentication or authorization. This could have enabled unauthorized users to create, modify, or delete resources on the platform. The issue has been fixed in FlagForge version 2.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://githu
as been fixed in FlagForge version 2.3.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FlagForgeCTF/flagForge/security/advisories/GHSA-v8rh-25rf-gfqw
CVE ID: CVE-2025-59933 State: PUBLISHED Published: 2025-09-29T22:04:09.404Z Last Updated: 2025-09-30T13:41:59.765Z Vendors: libvips Products: libvips Problem Types: CWE-126 Description: libvips is a demand-driven, horizontally threaded image processing library. For versions 8.17.1 and below, when libvips is compiled with support for PDF input via poppler, the pdfload operation is affected by a buffer read overflow when parsing the header of a crafted PDF with a page that defines a width but not a height. Those using libvips compiled without support for PDF input are unaffected as well as thosewith support for PDF input via PDFium. This issue is fixed in version 8.17.2. A workaround for those
ted as well as thosewith support for PDF input via PDFium. This issue is fixed in version 8.17.2. A workaround for those affected is to block the VipsForeignLoadPdf operation via vips_operation_block_set, which is available in most language bindings, or to set VIPS_BLOCK_UNTRUSTED environment variable at runtime, which will block all untrusted loaders including PDF input via poppler. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libvips/libvips/security/advisories/GHSA-q8px-4w5q-c2r4 - https://github.com/libvips/libvips/commit/a58bfae9223a5466cc81ba9fe6dfb08233cf17d1 - https://github.com/libvips/libvips/releases/tag/v8.17.2
CVE ID: CVE-2025-59934 State: PUBLISHED Published: 2025-09-26T23:03:30.995Z Last Updated: 2025-09-29T14:59:51.354Z Severity: CRITICAL (CVSS 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: formbricks Products: formbricks Problem Types: CWE-347, CWE-345, CWE-287 Description: Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs (jwt.decode) without verifying their signatures. Both the email verification token login path and the password reset server action use the same validator, which does not check the token’s signature, expiration
path and the password reset server action use the same validator, which does not check the token’s signature, expiration, issuer, or audience. If an attacker learns the victim’s actual user.id, they can craft an arbitrary JWT with an alg: "none" header and use it to authenticate and reset the victim’s password. This issue has been patched in version 4.0.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/formbricks/formbricks/security/advisories/GHSA-7229-q9pv-j6p4 - https://github.com/formbricks/formbricks/pull/6596 - https://github.com/formbricks/formbricks/commit/eb1349f205189d5b2d4a95ec42245ca98cf68c82 - https://github.com/formbricks/formbricks/blob/843
ormbricks/formbricks/commit/eb1349f205189d5b2d4a95ec42245ca98cf68c82 - https://github.com/formbricks/formbricks/blob/843110b0d6c37b5c0da54291616f84c91c55c4fc/apps/web/lib/jwt.ts#L114-L117
CVE ID: CVE-2025-59936 State: PUBLISHED Published: 2025-09-27T00:22:10.412Z Last Updated: 2025-09-29T14:55:22.162Z Severity: CRITICAL (CVSS 9.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L) Vendors: nearform Products: get-jwks Problem Types: CWE-116 Description: get-jwks contains fetch utils for JWKS keys. In versions prior to 11.0.2, a vulnerability in get-jwks can lead to cache poisoning in the JWKS key-fetching mechanism. When the iss (issuer) claim is validated only after keys are retrieved from the cache, it is possible for cached keys from an unexpected issuer to be reused, resulting in a bypass of issuer validation. This design flaw enables a potential attack where a malicious actor c
eused, resulting in a bypass of issuer validation. This design flaw enables a potential attack where a malicious actor crafts a pair of JWTs, the first one ensuring that a chosen public key is fetched and stored in the shared JWKS cache, and the second one leveraging that cached key to pass signature validation for a targeted iss value. The vulnerability will work only if the iss validation is done after the use of get-jwks for keys retrieval. This issue has been patched in version 11.0.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nearform/get-jwks/security/advisories/GHSA-qc2q-qhf3-235m - https://github.com/nearform/get-jwks/commit/1706a177a80a1759f
earform/get-jwks/security/advisories/GHSA-qc2q-qhf3-235m - https://github.com/nearform/get-jwks/commit/1706a177a80a1759fe68e3339dc5a219ce03ddb9
CVE ID: CVE-2025-59937 State: PUBLISHED Published: 2025-09-29T22:21:02.484Z Last Updated: 2025-09-30T14:44:35.194Z Vendors: wneessen Products: go-mail Problem Types: CWE-88 Description: go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address values when a sender- or recipient address is passed to the corresponding MAIL FROM or RCPT TO commands of the SMTP client, there is a possibility of wrong address routing or even ESMTP parameter smuggling. For successful exploitation, it is required that the user's code allows for arbitrary mail address input (i. e. through a web form or similar). If only static mail addres
he user's code allows for arbitrary mail address input (i. e. through a web form or similar). If only static mail addresses are used (i. e. in a config file) and the mail addresses in use do not consist of quoted local parts, this should not affect users. This issue is fixed in version 0.7.1 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wneessen/go-mail/security/advisories/GHSA-wpwj-69cm-q9c5 - https://github.com/wneessen/go-mail/issues/495 - https://github.com/wneessen/go-mail/pull/496 - https://github.com/wneessen/go-mail/commit/42e92cfe027be04aff72921adb0f72f11d517479
CVE ID: CVE-2025-59938 State: PUBLISHED Published: 2025-09-27T00:27:43.728Z Last Updated: 2025-09-29T14:52:52.788Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: wazuh Products: wazuh Problem Types: CWE-122 Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. In versions starting from 3.8.0 to before 4.11.0, wazuh-analysisd is vulnerable to a heap buffer overflow when parsing XML elements from Windows EventChannel messages. This issue has been patched in version 4.11.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/wazuh/wazuh/security/advisories/GHSA-vw3r-mjg3-9hh2
CVE ID: CVE-2025-59939 State: PUBLISHED Published: 2025-09-27T00:38:42.946Z Last Updated: 2025-09-29T14:50:30.539Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: LabRedesCefetRJ Products: WeGIA Problem Types: CWE-89 Description: WeGIA is a Web manager for charitable institutions. Prior to version 3.5.0, WeGIA is vulnerable to SQL Injection attacks in the control.php endpoint with the following parameters: nomeClasse=ProdutoControle&metodo=excluir&id_produto=[malicious command]. It is necessary to apply prepared statements methods, sanitization, and validations on theid_produto parameter. This issue has been patched in version 3.5.0. Additional Analyst Notes:
on, and validations on theid_produto parameter. This issue has been patched in version 3.5.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-jx9m-pgf8-v489
CVE ID: CVE-2025-59940 State: PUBLISHED Published: 2025-09-29T22:27:30.087Z Last Updated: 2025-09-30T14:34:58.817Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: mondeja Products: mkdocs-include-markdown-plugin Problem Types: CWE-20 Description: mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide with substitution placeholders. This issue is fixed in version 7.1.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mondeja/mkdocs-include-markdown-plugin/security/advisories/GHSA-v39m-5m9j-m9w9 - https://github.com/monde
s://github.com/mondeja/mkdocs-include-markdown-plugin/security/advisories/GHSA-v39m-5m9j-m9w9 - https://github.com/mondeja/mkdocs-include-markdown-plugin/issues/274 - https://github.com/mondeja/mkdocs-include-markdown-plugin/pull/277 - https://github.com/mondeja/mkdocs-include-markdown-plugin/commit/7466d67aa0de8ffbc427204ad2475fed07678915
CVE ID: CVE-2025-59941 State: PUBLISHED Published: 2025-09-29T22:38:42.589Z Last Updated: 2025-09-30T14:13:56.958Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: filecoin-project Products: go-f3 Problem Types: CWE-305 Description: go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.8 and below, go-f3's justification verification caching mechanism has a vulnerability where verification results are cached without properly considering the context of the message. An attacker can bypass justification verification by submitting a valid message with a correct justification and then reusing the same cached justification in contexts
n by submitting a valid message with a correct justification and then reusing the same cached justification in contexts where it would normally be invalid. This occurs because the cached verification does not properly validate the relationship between the justification and the specific message context it's being used with. This issue is fixed in version 0.8.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/filecoin-project/go-f3/security/advisories/GHSA-7pq9-rf9p-wcrf - https://github.com/filecoin-project/go-f3/commit/76fff18cf07b21baccf537024bdb2fb41f75f6e2#diff-e1f646cea41790e1642e4e649c9e3c526344736d67222201703e1c29c23e9625
CVE ID: CVE-2025-59942 State: PUBLISHED Published: 2025-09-29T22:50:36.462Z Last Updated: 2025-09-30T13:51:13.530Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: filecoin-project Products: go-f3 Problem Types: CWE-190 Description: go-f3 is a Golang implementation of Fast Finality for Filecoin (F3). In versions 0.8.6 and below, go-f3 panics when it validates a "poison" messages causing Filecoin nodes consuming F3 messages to become vulnerable. A "poison" message can can cause integer overflow in the signer index validation, which can cause the whole node to crash. These malicious messages aren't self-propagating since the bug is in the validator. An attacker n
e whole node to crash. These malicious messages aren't self-propagating since the bug is in the validator. An attacker needs to directly send the message to all targets. This issue is fixed in version 0.8.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/filecoin-project/go-f3/security/advisories/GHSA-g99p-47x7-mq88
CVE ID: CVE-2025-59943 State: PUBLISHED Published: 2025-10-03T20:06:09.404Z Last Updated: 2025-10-03T20:45:27.185Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N) Vendors: thorsten Products: phpMyFAQ Problem Types: CWE-286, CWE-284 Description: phpMyFAQ is an open source FAQ web application. Versions 4.0-nightly-2025-10-03 and below do not enforce uniqueness of email addresses during user registration. This allows multiple distinct accounts to be created with the same email. Because email is often used as an identifier for password resets, notifications, and administrative actions, this flaw can cause account ambiguity and, in certain configurations, may lead to privil
ns, and administrative actions, this flaw can cause account ambiguity and, in certain configurations, may lead to privilege escalation or account takeover. This issue is fixed in version 4.0.13. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/thorsten/phpMyFAQ/security/advisories/GHSA-9wj2-4hcm-r74j - https://github.com/thorsten/phpMyFAQ/commit/44cd20f86eb041f39d1c30a9beefad1cc61dc0ec
CVE ID: CVE-2025-59944 State: PUBLISHED Published: 2025-10-03T20:15:30.678Z Last Updated: 2025-10-03T20:43:03.394Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: cursor Products: cursor Problem Types: CWE-178 Description: Cursor is a code editor built for programming with AI. Versions 1.6.23 and below contain case-sensitive checks in the way Cursor IDE protects its sensitive files (e.g., */.cursor/mcp.json), which allows attackers to modify the content of these files through prompt injection and achieve remote code execution. A prompt injection can lead to full RCE through modifying sensitive files on case-insensitive fileystems. This issue is fixed in versio
ion can lead to full RCE through modifying sensitive files on case-insensitive fileystems. This issue is fixed in version 1.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cursor/cursor/security/advisories/GHSA-xcwh-rrwj-gxc7
CVE ID: CVE-2025-59945 State: PUBLISHED Published: 2025-09-27T01:01:52.330Z Last Updated: 2025-09-29T14:10:54.427Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Syslifters Products: sysreptor Problem Types: CWE-266 Description: SysReptor is a fully customizable pentest reporting platform. In versions from 2024.74 to before 2025.83, authenticated and unprivileged (non-admin) users can assign the is_project_admin permission to their own user. This allows users to read, modify and delete pentesting projects they are not members of and are therefore not supposed to access. This issue has been patched in version 2025.83. Additional Analyst Notes: - CISA ADP Vulnr
efore not supposed to access. This issue has been patched in version 2025.83. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Syslifters/sysreptor/security/advisories/GHSA-r6hm-59cq-gjg6 - https://github.com/Syslifters/sysreptor/commit/de8b5d89d0644479ee0da0a113c6bcc2436ba7f4
CVE ID: CVE-2025-59948 State: PUBLISHED Published: 2025-09-29T22:56:46.073Z Last Updated: 2025-09-30T13:47:05.742Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: FreshRSS Products: FreshRSS Problem Types: CWE-79 Description: FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in feed content, so by finding a page that renders feed entries without CSP, it is possible to execute an XSS payload. The Allow API access authentication setting needs to be enabled by the instance administrator beforehand for the attack to work as it relies on api/query.php. An account takeover is possible by se
nce administrator beforehand for the attack to work as it relies on api/query.php. An account takeover is possible by sending a change password request via the XSS payload / setting UserJS for persistence / stealing the autofill password / displaying a phishing page with a spoofed URL using history.replaceState() If the victim is an administrator, the attacker can also perform administrative actions. This issue is fixed in version 1.27.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-rwhf-vjjx-gmm9 - https://github.com/FreshRSS/FreshRSS/commit/7df6c201f2e6a6521d20718dfd8d9794c7437d1f - https://github.com/FreshRS
gmm9 - https://github.com/FreshRSS/FreshRSS/commit/7df6c201f2e6a6521d20718dfd8d9794c7437d1f - https://github.com/FreshRSS/FreshRSS/releases/tag/1.27.0
CVE ID: CVE-2025-59950 State: PUBLISHED Published: 2025-09-29T23:21:42.118Z Last Updated: 2025-09-30T14:19:51.364Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L) Vendors: FreshRSS Products: FreshRSS Problem Types: CWE-1021 Description: FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection (confirmation dialog), it is possible to trick the admin into clicking the Promote button in another user's management page after the admin double clicks on a button inside an attacker-controlled website. A successful attack can allow the attacker to promote themselves to "admin" and log into other users' a
trolled website. A successful attack can allow the attacker to promote themselves to "admin" and log into other users' accounts; the attacker has to know the specific instance URL they're targeting. This issue is fixed in version 1.27.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-j66v-hvqx-5vh3 - https://github.com/FreshRSS/FreshRSS/pull/7771 - https://github.com/FreshRSS/FreshRSS/releases/tag/1.27.0
CVE ID: CVE-2025-59951 State: PUBLISHED Published: 2025-10-01T21:52:01.232Z Last Updated: 2025-10-06T18:33:37.335Z Vendors: LukeGus Products: Termix Problem Types: CWE-348, CWE-284 Description: Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The official Docker image for Termix versions 1.5.0 and below, due to being configured with an Nginx reverse proxy, causes the backend to retrieve the proxy's IP instead of the client's IP when using the req.ip method. This results in isLocalhost always returning True. Consequently, the /ssh/db/host/internal endpoint can be accessed directly without login or authentication. This endpoint recor
uently, the /ssh/db/host/internal endpoint can be accessed directly without login or authentication. This endpoint records the system's stored SSH host information, including addresses, usernames, and passwords, posing an extremely high security risk. Users who use the official Termix docker image, build their own image using the official dockerfile, or utilize reverse proxy functionality will be affected by this vulnerability. This issue is fixed in version 1.6.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/LukeGus/Termix/security/advisories/GHSA-92cw-877q-6r94 - https://github.com/LukeGus/Termix/pull/221
CVE ID: CVE-2025-59952 State: PUBLISHED Published: 2025-09-29T23:32:33.994Z Last Updated: 2025-09-30T14:19:23.107Z Vendors: minio Products: minio-java Problem Types: CWE-20, CWE-94 Description: MinIO Java SDK is a Simple Storage Service (aka S3) client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically substituted with their actual values during processing. This unintended behavior could lead to the exposure of sensitive information, including credentials, file paths, or system configuration details, if such refe