CVE-2024-36107

Medium

Advisory

Published 29 May 2024In the index since 5 Sept 2026

Severity: Medium; worst across findings
CVSS: 5.3; base score, highest
EPSS: 0.006; 48th percentile
CISA KEV: Not listed; no confirmed exploitation
Charts affected: 27; of 17,781 indexed, latest versions
Container images: 23; deployed by those charts
Fix available: 3 of 3; affected packages

Information disclosure in minio

Carried by container images the latest versions of 27 of 17,781 indexed charts deploy, on 23 images.

Affected package	Affected versions	Fixed in	Images
github.com/minio/miniogolang	v0.0.0-20200306033404-a1c7c9ea73d7, v0.0.0-20200421050159-282c9f790a03, v0.0.0-20200927172404-27d9bd04e544, v0.0.0-20201113003322-7549de034108+15 more	0.0.0-20240527191746-e0fe7cc39172	23
miniobitnami	2022.12.12-0, 2023.12.23-0, 2023.12.23-1	2024.5.27	3
MinIObitnami	2023.12.23, 2023.12.23-1	2024.5.27	2

OSV records: BIT-minio-2024-36107 GHSA-95fr-cm4m-q5p9
Also known as: GO-2024-2886

Charts affected

27 by stars

Chart

Latest

Affected images

Radar Score

milvusmilvus

4.0.31

1 of 5 See more

milvus milvus 4.0.31

1 of the 5 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	github.com/minio/minio@v0.0.0-20230320201618-05444a0f6af8	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

32,259

glasskube-operatorglasskube

0.12.2

1 of 3 See more

glasskube-operator glasskube 0.12.2

1 of the 3 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

11,933

coder-observabilitycoder-observability

0.7.3

1 of 21 See more

coder-observability coder-observability 0.7.3

1 of the 21 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	github.com/minio/minio@v0.0.0-20220917000945-d89f6af6c4ab	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

24,700

kraken-cikraken-ci

1.7.36

1 of 10 See more

kraken-ci kraken-ci 1.7.36

1 of the 10 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

7,273

oesopsmx

4.0.32

1 of 25 See more

oes opsmx 4.0.32

1 of the 25 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	github.com/minio/minio@v0.0.0-20201113003322-7549de034108	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

107,811

feedbacksystemthm-mni-ii

0.47.1

1 of 10 See more

feedbacksystem thm-mni-ii 0.47.1

1 of the 10 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	github.com/minio/minio@v0.0.0-20231223071911-496027b589c2 minio@2023.12.23-0 MinIO@2023.12.23	0.0.0-20240527191746-e0fe7cc39172 2024.5.27 2024.5.27

Open the chart page →

28,534

lgtm-stacklgtm-stack

0.1.3

1 of 8 See more

lgtm-stack lgtm-stack 0.1.3

1 of the 8 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	github.com/minio/minio@v0.0.0-20240118225128-19387cafab76	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

5,576

mattermost-enterprise-editionmattermost

2.6.103

1 of 3 See more

mattermost-enterprise-edition mattermost 2.6.103

1 of the 3 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	github.com/minio/minio@v0.0.0-20200421050159-282c9f790a03	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

3,600

clowder2ncsa

1.9.7

1 of 12 See more

clowder2 ncsa 1.9.7

1 of the 12 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	github.com/minio/minio@v0.0.0-20231223071911-496027b589c2 minio@2023.12.23-1 MinIO@2023.12.23-1	0.0.0-20240527191746-e0fe7cc39172 2024.5.27 2024.5.27

Open the chart page →

37,373

postgres-backuppostgres-backup

0.3.0

1 of 2 See more

postgres-backup postgres-backup 0.3.0

1 of the 2 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
nerzhul/mc-arm64 :2020.10.03	4215df511f31	github.com/minio/minio@v0.0.0-20200927172404-27d9bd04e544	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

5,462

wraftwraft

0.1.12

1 of 9 See more

wraft wraft 0.1.12

1 of the 9 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/minio/minio@v0.0.0-20230721211244-d004c4538643	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

10,090

airbyteairbyte-v2

2.2.0

1 of 10 See more

airbyte airbyte-v2 2.2.0

1 of the 10 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-11-20T22-40-07Z	b833a1699b4f	github.com/minio/minio@v0.0.0-20231120224007-f56a182b719c	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

12,473

minioappscode

2026.9.11

1 of 1 See more

minio appscode 2026.9.11

1 of the 1 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	github.com/minio/minio@v0.0.0-20230112020616-7bc95c47a322	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

4,043

assemblylineassemblyline

7.4.17

1 of 12 See more

assemblyline assemblyline 7.4.17

1 of the 12 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	github.com/minio/minio@v0.0.0-20240111074616-099e88516dd6	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

12,898

ragflowbaboulinet

0.1.1

1 of 5 See more

ragflow baboulinet 0.1.1

1 of the 5 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	github.com/minio/minio@v0.0.0-20231220010002-7a311a3b666a	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

5,823

dnation-kubernetes-monitoring-stackdnationcloud

4.0.2

1 of 17 See more

dnation-kubernetes-monitoring-stack dnationcloud 4.0.2

1 of the 17 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

21,641

mimir-openshift-experimentalgrafana

2.1.0

1 of 4 See more

mimir-openshift-experimental grafana 2.1.0

1 of the 4 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	github.com/minio/minio@v0.0.0-20210213070509-a94a9c37faf5	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

17,759

evi-miniointel

3.0.3

1 of 2 See more

evi-minio intel 3.0.3

1 of the 2 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

7,459

miniokubebb

5.0.10

1 of 2 See more

minio kubebb 5.0.10

1 of the 2 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

7,459

apica-ascentlogiqai

2.0.4

1 of 19 See more

apica-ascent logiqai 2.0.4

1 of the 19 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	github.com/minio/minio@v0.0.0-20200306033404-a1c7c9ea73d7	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

23,613

minioopenobserve

5.0.7

1 of 2 See more

minio openobserve 5.0.7

1 of the 2 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

7,459

miniosergiotocalini

1.0.0

1 of 1 See more

minio sergiotocalini 1.0.0

1 of the 1 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/minio/minio@v0.0.0-20230721211244-d004c4538643	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

4,203

mimirskyloud-helm-charts

5.5.1

1 of 5 See more

mimir skyloud-helm-charts 5.5.1

1 of the 5 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

10,651

spinnakerspinnaker

2.2.13

1 of 4 See more

spinnaker spinnaker 2.2.13

1 of the 4 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	github.com/minio/minio@v0.0.0-20201113003322-7549de034108	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

6,836

servicexssl-hep

1.8.5

1 of 16 See more

servicex ssl-hep 1.8.5

1 of the 16 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	github.com/minio/minio@v0.0.0-20221212192727-a469e6768df4 minio@2022.12.12-0	0.0.0-20240527191746-e0fe7cc39172 2024.5.27

Open the chart page →

66,266

miniouninettsigma2

1.2.0

1 of 1 See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

4,960

wexa-studiowexa-studio

1.2.0

1 of 15 See more

wexa-studio wexa-studio 1.2.0

1 of the 15 container images this version deploys carry CVE-2024-36107.

Container image	Digest	Package	Fixed in
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	github.com/minio/minio@v0.0.0-20240116160738-ca258c04cb1d	0.0.0-20240527191746-e0fe7cc39172

Open the chart page →

14,983

Container images carrying it

23 by charts deploying them

A fixed version is listed for 3 of the 3 affected packages.

Container image	Digest	Package	Fixed in	Used by
minio/mc :RELEASE.2020-11-25T23-04-07Z	bf85c57cdfcc	github.com/minio/minio@v0.0.0-20201113003322-7549de034108	0.0.0-20240527191746-e0fe7cc39172	2
quay.io/minio/minio :RELEASE.2023-09-30T07-02-29Z	6262bc9a2730	github.com/minio/minio@v0.0.0-20230930070229-22d2dbc4e68a	0.0.0-20240527191746-e0fe7cc39172	2
quay.io/minio/minio :RELEASE.2023-07-21T21-12-44Z	8e5e9490cd50	github.com/minio/minio@v0.0.0-20230721211244-d004c4538643	0.0.0-20240527191746-e0fe7cc39172	2
quay.io/minio/minio :RELEASE.2023-02-10T18-48-39Z	a0a002cb113c	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20240527191746-e0fe7cc39172	2
bitnamilegacy/minio :2023.12.23	0b60b6565ab2	github.com/minio/minio@v0.0.0-20231223071911-496027b589c2 minio@2023.12.23-1 MinIO@2023.12.23-1	0.0.0-20240527191746-e0fe7cc39172 2024.5.27 2024.5.27	1
bitnamilegacy/minio :2022.12.12-debian-11-r9	0f7c8ac484ac	github.com/minio/minio@v0.0.0-20221212192727-a469e6768df4 minio@2022.12.12-0	0.0.0-20240527191746-e0fe7cc39172 2024.5.27	1
bitnamilegacy/minio :2023.12.23-debian-11-r2	5bb0aa825d16	github.com/minio/minio@v0.0.0-20231223071911-496027b589c2 minio@2023.12.23-0 MinIO@2023.12.23	0.0.0-20240527191746-e0fe7cc39172 2024.5.27 2024.5.27	1
hyperledgerk8s/minio-minio :RELEASE.2023-02-10T18-48-39Z	ed0b0c56f1ea	github.com/minio/minio@v0.0.0-20230210184839-d0f4cc89a5d0	0.0.0-20240527191746-e0fe7cc39172	1
minio/mc :RELEASE.2020-04-25T00-43-23Z	1806872732e1	github.com/minio/minio@v0.0.0-20200421050159-282c9f790a03	0.0.0-20240527191746-e0fe7cc39172	1
minio/mc :RELEASE.2021-02-14T04-28-06Z	2a374c124d44	github.com/minio/minio@v0.0.0-20210213070509-a94a9c37faf5	0.0.0-20240527191746-e0fe7cc39172	1
minio/mc :RELEASE.2020-03-14T01-23-37Z	571feb124476	github.com/minio/minio@v0.0.0-20200306033404-a1c7c9ea73d7	0.0.0-20240527191746-e0fe7cc39172	1
minio/minio :RELEASE.2024-01-16T16-07-38Z	4c4a4876193f	github.com/minio/minio@v0.0.0-20240116160738-ca258c04cb1d	0.0.0-20240527191746-e0fe7cc39172	1
minio/minio :RELEASE.2024-01-18T22-51-28Z	551682a57a94	github.com/minio/minio@v0.0.0-20240118225128-19387cafab76	0.0.0-20240527191746-e0fe7cc39172	1
minio/minio :RELEASE.2023-03-20T20-16-18Z	6d770d7f255c	github.com/minio/minio@v0.0.0-20230320201618-05444a0f6af8	0.0.0-20240527191746-e0fe7cc39172	1
minio/minio :RELEASE.2023-11-20T22-40-07Z	b833a1699b4f	github.com/minio/minio@v0.0.0-20231120224007-f56a182b719c	0.0.0-20240527191746-e0fe7cc39172	1
minio/minio :RELEASE.2022-10-24T18-35-07Z	f9576903f19d	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240527191746-e0fe7cc39172	1
minio/minio :RELEASE.2023-01-12T02-06-16Z	fc6bedc99355	github.com/minio/minio@v0.0.0-20230112020616-7bc95c47a322	0.0.0-20240527191746-e0fe7cc39172	1
nerzhul/mc-arm64 :2020.10.03	4215df511f31	github.com/minio/minio@v0.0.0-20200927172404-27d9bd04e544	0.0.0-20240527191746-e0fe7cc39172	1
sigma2as/minio :20240306-3a2e4f5	c284ead9ec3e	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240527191746-e0fe7cc39172	1
quay.io/minio/minio :RELEASE.2023-12-20T01-00-02Z	5702ea361420	github.com/minio/minio@v0.0.0-20231220010002-7a311a3b666a	0.0.0-20240527191746-e0fe7cc39172	1
quay.io/minio/minio :RELEASE.2024-01-11T07-46-16Z	796f75ea413b	github.com/minio/minio@v0.0.0-20240111074616-099e88516dd6	0.0.0-20240527191746-e0fe7cc39172	1
quay.io/minio/minio :RELEASE.2022-09-17T00-09-45Z	c3d20bc2ea08	github.com/minio/minio@v0.0.0-20220917000945-d89f6af6c4ab	0.0.0-20240527191746-e0fe7cc39172	1
quay.io/minio/minio :RELEASE.2022-10-24T18-35-07Z	d853057f2800	github.com/minio/minio@v0.0.0-20221024183507-fc6c7949727e	0.0.0-20240527191746-e0fe7cc39172	1