All vulnerabilities

Servers and applications

CVE-2022-31028

MinIO is a multi-cloud object storage solution. Starting with version RELEASE.2019-09-25T18-25-51Z and ending with version RELEASE.2022-06-02T02-11-04Z, MinIO is vulnerable to an unending go-routine buildup while keeping connections established due to HTTP clients not closing the connections. Public-facing MinIO deployments are most affected. Users should upgrade to RELEASE.2022-06-02T02-11-04Z…

Severity
High 7.5
Published
7 Jun 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
2022-06-02t02-11-04z
Sources
NVD

Affected software

SoftwareAffected versions
MinIOServers and applications · cpe:a:minio:minio
  • From 2019-09-25t18-25-51z before 2022-06-02t02-11-04z

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-31028
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-31028