{"action":"Upgrade github.com/minio/operator to 7.1.0 or later.","affected":[{"fixed":"7.1.0","introduced":"0"}],"component":"github.com/minio/operator","cve_ids":["CVE-2025-32963"],"ecosystem":"Go","epss":0.0063,"exploited":false,"fixed_versions":["7.1.0"],"ghsa_id":"GHSA-7m6v-q233-q9j9","id":"tcs_01M5KF2AYYDDA8EYSM783GRJ6T","modified_at":"2026-02-03T03:08:35.234797Z","published_at":"2025-04-21T22:51:11Z","references":["https://osv.dev/vulnerability/GHSA-7m6v-q233-q9j9","https://github.com/minio/operator/security/advisories/GHSA-7m6v-q233-q9j9","https://nvd.nist.gov/vuln/detail/CVE-2025-32963","https://github.com/minio/operator/commit/d586294d526bf0d8e6097225114655f68b0adcc5","https://github.com/minio/operator","https://github.com/minio/operator/releases/tag/v7.1.0"],"severity":{"label":"medium","score":6.9},"sources":[{"source":"osv","source_id":"GHSA-7m6v-q233-q9j9","url":"https://osv.dev/vulnerability/GHSA-7m6v-q233-q9j9"},{"source":"nvd","source_id":"CVE-2025-32963","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32963"}],"summary":"Minio Operator uses Kubernetes apiserver audience for AssumeRoleWithWebIdentity STS"}