VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/minio/operator: vulnerability history, versions and safety

github.com/minio/operator is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, first recorded in Apr 2025. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded M1 U1
i
1 with no fix published

No patched version yet — these are the ones to plan around.

See the unfixed vulnerabilities →
i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/minio/operator vulnerabilities

Vulert verdict on github.com/minio/operator v0.4.0 i

Updated on 23 Oct 2026

Careful: one of the 2 vulnerabilities Vulert records for this package has no fix yet. Plan around that one, or apply its workaround. The rest have a fixed version to move to.

Package health score 77/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Moderate

What to do: Plan around the 1 vulnerability with no published fix: each lists the affected range and any workaround that reduces exposure. No fix yet: Vulert alerts you the moment one is published. Monitor it with Vulert →

  • Current release v0.4.0 — unaffected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 22 Apr 2025 i
  • Highest CVSS 6.9 i
  • With no published fix 1 i
  • Stars 1,420 i
  • OpenSSF scorecard 4/10 i
  • Last release 7 months ago i
  • Licence AGPL-3.0 i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/minio/operator, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v0.0.0-20260306200702-8d7b8231b99d 06 Mar 2026 M1 U1 AGPL-3.0 No Details →
v0.0.0-20251009055539-34dc39801903 09 Oct 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20251009051804-31d4e8750610 09 Oct 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20251003220721-0ee2c254677e 03 Oct 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250905064444-1e792f1158c9 05 Sep 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250823114224-e054c34ee365 23 Aug 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250731165143-0790e5ea4870 31 Jul 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250729165802-d3e77e08b5a8 29 Jul 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250724145401-0e9a98a5417a 24 Jul 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250630194310-7c1f23438335 30 Jun 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250610163828-60303adec7af 10 Jun 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250603215812-dae3053cb39d 03 Jun 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250603213315-dd29c58ccfb7 03 Jun 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250602220009-c71f395abd95 02 Jun 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250506022859-3b9d10f2403e 06 May 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250505214352-e5c23d8b798a 05 May 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250430075750-d67978bceef0 30 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250423195428-51a1c64002f8 23 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250423184541-6eee6a7caa70 23 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250421220503-11b0cb47d8c5 21 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250418234103-258fcd8515e1 18 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250418222618-00378303a987 18 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250417180215-31ba8a7b94f9 17 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250415192321-081afeaf847c 15 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250414203221-6ecdc21de088 14 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250414161105-d586294d526b 14 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250411200813-296f059061b4 11 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250407082445-bba964a1bfb6 07 Apr 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250328194223-f31aaf4eb7ec 28 Mar 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250324081704-22c01e4d5f31 24 Mar 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250321212756-314e9dc2c773 21 Mar 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250321052154-e97863ae76fb 21 Mar 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250313031855-a7dfa7c12072 13 Mar 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250212172505-79d3d8bf4780 12 Feb 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250122233210-dc1bcb3482a0 22 Jan 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20250122230035-be312970d1f1 22 Jan 2025 M1 U1 AGPL-3.0 No Details →
v0.0.0-20241218204644-c3495a770927 18 Dec 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20241210221517-d1653714e56e 10 Dec 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20241209213951-bdab1602e967 09 Dec 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20241029102954-b5dd4cf31b05 29 Oct 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20241025181555-0d8f857bf7ff 25 Oct 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20241017184530-54a9f26436c5 17 Oct 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20241016175335-00f9e7e8ae6a 16 Oct 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20241016013653-6cd2041e1af9 16 Oct 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20241010191107-082389a29339 10 Oct 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20241007175805-c5b838c47560 07 Oct 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240925190202-59398ea04abe 25 Sep 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240920093138-868ae2d86b4f 20 Sep 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240919194011-28d4cd63d4f2 19 Sep 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240911205719-6651c8b49c8e 11 Sep 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240911060155-6785830de5dd 11 Sep 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240903183432-bada4347b901 03 Sep 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240829164837-73526502d9dc 29 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240829040701-44217fbb542b 29 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240827212223-63461a1bad99 27 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240826105437-45110b9d7e63 26 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240823071951-d0277255fe18 23 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240816121047-97d95fa53b6c 16 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240815121405-3eef3a208a56 15 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240814205237-05cd0bb4226f 14 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240812163149-6a1e81be56f7 12 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240810131829-c28fcf820378 10 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240808200827-15c388bd4ce0 08 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240807122357-66ad6ef1e218 07 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240806014749-ccade59dbe07 06 Aug 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240730212042-d16ef8a5d713 30 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240729222411-03613d29e557 29 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240729002517-7f539340aca4 29 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240726062053-54be9cb887c7 26 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240725005838-5a6fa656f5ca 25 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240723133611-2c72c36b6b30 23 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240722043712-a2614a6674b5 22 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240718222832-b035a9133f40 18 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240718043014-b05e5867e193 18 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240717225906-82484b0ed3f9 17 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240717002213-a280480c8b37 17 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240715202615-7f9517485a3a 15 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240710185613-e429cab378d4 10 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240708174525-337ae05492a8 08 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240708174502-9d45aba5ecc5 08 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240706153101-b70bfeec9be4 06 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240705184354-28fa6046ba58 05 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240705071834-2e1497ad4e73 05 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240704154930-99c789363f6c 04 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240703155848-95f351195218 03 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240703050435-5f016a18ffda 03 Jul 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240629062912-24f34a0a893a 29 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240628003315-8a1eab5e452f 28 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240626124746-d78c5e0793a7 26 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240625225432-cb966891e657 25 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240624161459-f07d0af5b170 24 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240624010254-7452337e7774 24 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240622170848-14fc77321be0 22 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240619150159-fd7ede7ba9b5 19 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240613164957-cabe56df307f 13 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240612182957-54e409165f0b 12 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240612024825-a01624738d4e 12 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240611063343-3da40065dae1 11 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240607231722-855d22bd8005 07 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240607183322-c6737b74eb9c 07 Jun 2024 M1 U1 AGPL-3.0 No Details →
v0.0.0-20240604235709-90377aba88b0 04 Jun 2024 M1 U1 — No Details →
v0.0.0-20240529162853-f3978db612aa 29 May 2024 M1 U1 — No Details →
v0.0.0-20240529010252-7a368c8d4502 29 May 2024 M1 U1 — No Details →
v0.0.0-20240524155505-fdb7232d2582 24 May 2024 M1 U1 — No Details →
v0.0.0-20240522094812-1c2fa4f402cc 22 May 2024 M1 U1 — No Details →
v0.0.0-20240521184818-56c1e353a62b 21 May 2024 M1 U1 — No Details →
v0.0.0-20240515035924-7ae65b2d74d1 15 May 2024 M1 U1 — No Details →
v0.0.0-20240514151241-c6d57c423953 14 May 2024 M1 U1 — No Details →
v0.0.0-20240513155835-e652ed315f1a 13 May 2024 M1 U1 — No Details →
v0.0.0-20240512172556-dae7854a7a1c 12 May 2024 M1 U1 — No Details →
v0.0.0-20240508145934-5db81aad6d51 08 May 2024 M1 U1 — No Details →
v0.0.0-20240507215017-8f6fef6af4ec 07 May 2024 M1 U1 — No Details →
v0.0.0-20240506170406-f963b2796cae 06 May 2024 M1 U1 — No Details →
v0.0.0-20240505053432-fd8f3fecfd22 05 May 2024 M1 U1 — No Details →
v0.0.0-20240501173842-f1c3de231082 01 May 2024 M1 U1 — No Details →
v0.0.0-20240430071501-010b890bfe53 30 Apr 2024 M1 U1 — No Details →
v0.0.0-20240424020655-276cb27e02e1 24 Apr 2024 M1 U1 — No Details →
v0.0.0-20240422181750-cc44b65e042f 22 Apr 2024 M1 U1 — No Details →
v0.0.0-20240420023537-fb6ceb8d9d66 20 Apr 2024 M1 U1 — No Details →
v0.0.0-20240418182153-c07c650c4644 18 Apr 2024 M1 U1 — No Details →

The newest 120 of 758 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2025 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/minio/operator

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↑ Disclosed ↑
CVE-2025-32963: MinIO Operator Vulnerability in STS Audience Handling 6.9 medium 7.1.0 21 Apr 2025
CVE-2025-32963: Minio Operator Vulnerability in AssumeRoleWithWebIdentity STS N/A unrated No fix published 22 Apr 2025

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/minio/operator

Is github.com/minio/operator safe to use?

Vulert records 2 vulnerabilities for github.com/minio/operator in Go: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. 1 of them has no published fix yet, so that is the one to avoid or mitigate.

What is github.com/minio/operator's Vulert package health score?

Vulert scores github.com/minio/operator 77/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Which version of github.com/minio/operator should I use?

v0.4.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/minio/operator have?

2 vulnerabilities are recorded for github.com/minio/operator in the Go ecosystem: 0 critical, 0 high, 1 medium and 0 low, plus 1 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/minio/operator vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/minio/operator in the last 12 months, and the oldest entry in this database dates to 21 Apr 2025. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/minio/operator are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/minio/operator for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/minio/operator version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.