Oxyno-zeta vulnerabilities
We track 3 vulnerabilities in Oxyno-zeta products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 11, 2026.
Latest Oxyno-zeta vulnerabilities
- 9.4 Critical severity
s3-proxy: Improper Limitation of a Pathname to a Restricted Directory
oxyno-zeta/s3-proxy is an aws s3 proxy written in go. Prior to 5.0.0, s3-proxy contains an authentication bypass caused by inconsistent URL path interpretation between the authentication middleware and the bucket handler. The authentication middleware evaluate
- 8.2 High severity
s3-proxy: Improper Neutralization of Input During Web Page Generation
oxyno-zeta/s3-proxy is an aws s3 proxy written in go. In affected versions a Reflected Cross-site Scripting (XSS) vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hij
- 9.8 Critical severity
react-editable-json-tree: Improper Neutralization of Directives in Dynamically Evaluated Code
This library allows strings to be parsed as functions and stored as a specialized component, [`JsonFunctionValue`](https://github.com/oxyno-zeta/react-editable-json-tree/blob/09a0ca97835b0834ad054563e2fddc6f22bc5d8c/src/components/JsonFunctionValue.js). To do