CVE-2025-59952
1 advisory.
Maven/io.minio:minio CVE-2025-59952: high
MinIO Java Client XML Tag Value Substitution Vulnerability
Action: Upgrade io.minio:minio to 8.6.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.6.0 | - |
Fixed versions
| 8.6.0 |
Sources
- osv: GHSA-h7rh-xfpj-hpcm
- https://github.com/minio/minio-java/security/advisories/GHSA-h7rh-xfpj-hpcm
- https://nvd.nist.gov/vuln/detail/CVE-2025-59952
- https://github.com/minio/minio-java/commit/f7a98d06b25e5464bdd4811b044e25ff9101d37f
- https://github.com/minio/minio-java
- https://github.com/minio/minio-java/releases/tag/8.6.0
CVE-2025-59952 · published · modified · JSON