astelm/minio
1
0
Fork 0
mirror of https://github.com/pgsty/minio.git synced 2026-11-10 17:45:32 +03:00
Code Issues Packages Projects Releases Wiki Activity

docs(contributors): cite the real CVE-2026-39414 follow-up commit

Browse Source 
Regenerated from the contributor data on silo.pgsty.com. One note named
5dc705936, which is not a commit in any repository; the June follow-up
is fd69c89d0.

Co-Authored-By: Claude Fable 5.2 <noreply@anthropic.com>
Signed-off-by: Feng Ruohang <rh@vonng.com>
This commit is contained in:
Feng Ruohang
2026-11-10 17:24:28 +08:00
parent 518915d241
commit 2b62df876a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CONTRIBUTORS.md
+1 -1
View File
@@ -150,7 +150,7 @@ When a proposal was incorporated through a later repair, its adoption is credite
| [@sun1024](https://github.com/sun1024) | Privately reported a security issue in SILO | Acknowledged with the reporter's agreement; private report details are not included here. |
| [@SimeonPoot](https://github.com/SimeonPoot) | Discovered the session-policy privilege escalation in service accounts and STS (CVE-2025-62506) | Publicly credited on upstream [GHSA-jjjj-jwhf-8rgr](https://github.com/advisories/GHSA-jjjj-jwhf-8rgr); inherited in SILO from [c1a49490](https://silo.pgsty.com/about/security-advisories/#cve-2025-62506). |
| [@KoreaSecurity](https://github.com/KoreaSecurity) | Discovered the OIDC JWT algorithm confusion vulnerability (CVE-2026-33322) | Publicly credited on upstream [GHSA-5cx5-wh4m-82fh](https://github.com/advisories/GHSA-5cx5-wh4m-82fh); remediated in SILO in [d24f449e0](https://silo.pgsty.com/about/security-advisories/#cve-2026-33322). |
| [@XlabAITeam](https://github.com/XlabAITeam) | Discovered the S3 Select oversized record memory exhaustion vulnerability (CVE-2026-39414) | Publicly credited on upstream [GHSA-h749-fxx7-pwpg](https://github.com/advisories/GHSA-h749-fxx7-pwpg); remediated in SILO in [3252d5b7f and 5dc705936](https://silo.pgsty.com/about/security-advisories/#cve-2026-39414). |
| [@XlabAITeam](https://github.com/XlabAITeam) | Discovered the S3 Select oversized record memory exhaustion vulnerability (CVE-2026-39414) | Publicly credited on upstream [GHSA-h749-fxx7-pwpg](https://github.com/advisories/GHSA-h749-fxx7-pwpg); remediated in SILO in [3252d5b7f and fd69c89d0](https://silo.pgsty.com/about/security-advisories/#cve-2026-39414). |
| [@ddd](https://github.com/ddd) | Discovered the Snowball auto-extract and unsigned-trailer query authentication bypasses (CVE-2026-40344, CVE-2026-41145) | Publicly credited on upstream [GHSA-9c4q-hq6p-c237](https://github.com/advisories/GHSA-9c4q-hq6p-c237) and [GHSA-hv4r-mvr4-25vw](https://github.com/advisories/GHSA-hv4r-mvr4-25vw); remediated in SILO in [efb6e5b00](https://silo.pgsty.com/about/security-advisories/#cve-2026-40344) and [f444b6f37](https://silo.pgsty.com/about/security-advisories/#cve-2026-41145). |
| [@adrian-doyensec](https://github.com/adrian-doyensec) | Reported the internode ReadMultiple msgpack path traversal (CVE-2026-42600) | Publicly credited on upstream [GHSA-xh8f-g2qw-gcm7](https://github.com/advisories/GHSA-xh8f-g2qw-gcm7); remediated in SILO in [73ac52472](https://silo.pgsty.com/about/security-advisories/#cve-2026-42600) and followed by the [SN-2026-002](https://silo.pgsty.com/about/security-advisories/#sn-2026-002) internode containment audit. |
| [@mosesdd](https://github.com/mosesdd) | Requested a maintained Helm chart | Closed issues: [pgsty/silo#1](https://github.com/pgsty/silo/issues/1) |