Sure, some security organizations found some security issues on RustFS; we treated those CVEs as the top priority, then fixed them ASAP and released a security patch <https://rustfs.dev/patch-release-rustfs-1-0-0-alpha-79-released/>. Due to MinIO being under maintenance mode, a lot of users try to treat RustFS as an alternative, RustFS will cover more and more scenarios in the future. The team has pay more attention on code security as well as security patch release process.
On Tue, Jan 6, 2026 at 5:38 AM André Luis Anastácio <[email protected]> wrote: > I believe it would be better for us to discuss other solutions. This CVE ( > https://github.com/rustfs/rustfs/security/advisories/GHSA-h956-rh7x-ppgj) > in RustFS makes me think the project was vibe-coded, which is a red flag > for me. In my view, this is not an acceptable vulnerability to exist in a > serious project, so I have mixed feelings about how serious this project > really is. > > I've seen some people talking about https://garagehq.deuxfleurs.fr/, but > I don't have much information about how good it is. Overall, I believe we > need to look into more options and understand the tradeoffs of each one > before choosing. > > André Anastácio > > On Monday, December 29th, 2025 at 00:06, Jinghe Ma <[email protected]> > wrote: > > As discussed in this issue > <https://github.com/apache/iceberg/issues/14638>, since the MinIO repo is > under maintenance mode, we want to replace MinIO with RustFS in iceberg > quick start demo > <https://iceberg.apache.org/spark-quickstart/#creating-a-table>. RustFS > <https://github.com/rustfs/rustfs> is an open-source and S3-compatible > distributed object storage system and is also a good alternative. We have > tested the whole replacement configuration locally, and it worked fine. All > the configuration changes and the test process are attached in this PR > <https://github.com/apache/iceberg/pull/14928>. We want to move the > replacement forward; if you guys have any concern about RustFS or any other > confusion, please let us know. > > Looking forward to hearing from you. > > >
