github.com/minio/console

View on Go

View on Github

Activity

Latest release: 1y ago
Total releases: 20
Cadence: ~14 days
Last 12 months: 0

Reach

Stars: —

Details

First release: Feb 16, 2024

Releases

Version	Released
`v1.7.6` patch	Feb 11, 2025
`v1.7.5` patch	Dec 07, 2024
`v1.7.4` patch	Nov 26, 2024
`v1.7.3` patch	Oct 30, 2024
`v1.7.2` patch	Oct 16, 2024
`v1.7.1` patch	Sep 20, 2024
`v1.7.0` minor	Aug 02, 2024
`v1.6.3` patch	Jul 12, 2024
`v1.6.2` patch	Jul 12, 2024
`v1.6.1` patch	Jun 25, 2024
`v1.6.0` minor	Jun 13, 2024
`v1.5.0` minor	Jun 08, 2024
`v1.4.1` patch	May 24, 2024
`v1.4.0` minor	May 06, 2024
`v1.3.0` minor	Apr 25, 2024
`v1.2.0` minor	Apr 10, 2024
`v1.1.1` patch	Mar 14, 2024
`v1.1.0` minor	Mar 12, 2024
`v1.0.0` major	Feb 29, 2024
`v0.46.0` initial	Feb 16, 2024

Repository

minio/console

Forks: —
Open issues: —

Dependencies (30)

Depends on

v1.7.6

Used by

Supply-chain exposure

10 tracked projects depend on this, <1% of every package we track.

A known CVE here directly exposes every one of them.

Vulnerable dependencies

1 of 30

golang.org/x/crypto 1 CVE

These dependencies are still vulnerable in their latest release. Whether the exact version this package pins is affected isn't checked yet.

Known CVEs (2)

CVE-2021-41266 GO-2022-0261 GHSA-4999-659w-mq36 Aug 21, 2024

Authentication bypass issue in the Operator Console in github.com/minio/console

Authentication bypass issue in the Operator Console in github.com/minio/console

Fixed in

0.12.3

References

https://github.com/minio/console/security/advisories/GHSA-4999-659w-mq36
https://nvd.nist.gov/vuln/detail/CVE-2021-41266
https://github.com/minio/console/pull/1217

Updated Mar 03, 2026 · Source: OSV.dev
CVE-2023-33955 GHSA-jv3f-7m33-qp65 May 26, 2023

Minio console object names with RIGHT-TO-LEFT OVERRIDE unicode character can be exploited

4.3 / 10
Medium
Network Low Low None Unchanged Low None None

Impact

Unicode RIGHT-TO-LEFT OVERRIDE characters can be used to mask the original filename.

Reported-By

Thanks to the report from Mio Li wulilixi1@gmail.com

Patches

commit 17e791afb90c9ad27c65f63c6be14f2f6a3a9d60 Author: Daniel Valdivia <18384552+dvaldivia@users.noreply.github.com> Date: Tue May 23 08:47:12 2023 -0700 Replace RIGHT-TO-LEFT OVERRIDE unicode (#2828) Signed-off-by: Daniel Valdivia <18384552+dvaldivia@users.noreply.github.com>

Workarounds

Workarounds are to remove the concerned file and rewrite it properly with the right file and extensions. Avoid using RTLO characters in your filenames.

Fixed in

0.28.0

References

https://github.com/minio/console/security/advisories/GHSA-jv3f-7m33-qp65
https://nvd.nist.gov/vuln/detail/CVE-2023-33955
https://github.com/minio/console/commit/17e791afb90c9ad27c65f63c6be14f2f6a3a9d60
https://github.com/minio/console
https://github.com/minio/console/releases/tag/v0.28.0

Updated Nov 08, 2023 · Source: OSV.dev

Insights

Releases per month

last 12 months

Release mix

major 1
minor 7
patch 11

20 releases

Dependencies over time

per release

Release calendar

2025

Jan

Feb

Mar

Apr

May

Jun

Jul

Aug

Sep

Oct

Nov

Dec

Less More