{"action":"Upgrade github.com/minio/console to 0.12.3 or later.","affected":[{"fixed":"0.12.3","introduced":"0"}],"component":"github.com/minio/console","cve_ids":["CVE-2021-41266"],"ecosystem":"Go","epss":0.48134,"exploited":false,"fixed_versions":["0.12.3"],"ghsa_id":"GHSA-4999-659w-mq36","id":"tcs_01M5KEW8WH0NE6H1RV6PMZSXEF","modified_at":"2026-05-04T08:46:07.417661963Z","published_at":"2021-11-15T23:16:49Z","references":["https://osv.dev/vulnerability/GHSA-4999-659w-mq36","https://github.com/minio/console/security/advisories/GHSA-4999-659w-mq36","https://nvd.nist.gov/vuln/detail/CVE-2021-41266","https://github.com/minio/console/pull/1217","https://github.com/minio/console"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-4999-659w-mq36","url":"https://osv.dev/vulnerability/GHSA-4999-659w-mq36"}],"summary":"Authentication bypass issue in the Operator Console"}