Wdinyes

**Name of the Vulnerable Software and Affected Versions** Minio (affected versions not specified) **Description** Minio is a Multi-Cloud Object Storage framework. The issue arises when the framework does not correctly honor a `Deny` policy on ByPassGoverance. Ideally, Minio should return "Access Denied" to all users attempting to DELETE a versionId with the special header `X-Amz-Bypass-Governance-Retention: true`. However, this was not honored, and instead, the request will be honored, and an object under governance would be incorrectly deleted. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.