aws-cli vulnerabilities (SUSE)
9 vulnerabilities.
-
aws-cliSUSE On Node.js < 3, pbkdf2 silently disregards Uint8Array input, returning static keys 9.1 Critical -
aws-cliSUSE pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js 9.1 Critical -
aws-cliSUSE juliangruber brace-expansion index.js expand redos 2.3 Low -
aws-cliSUSE Regular Expression Denial of Service (ReDoS) in cross-spawn 8.7 High -
aws-cliSUSE Valid ECDSA signatures erroneously rejected in Elliptic 4.8 Medium -
aws-cliSUSE Elliptic's verify function omits uniqueness validation 9.1 Critical -
aws-cliSUSE Catastrophic backtracking in URL authority parser when passed URL containing many @ characters 7.5 High -
aws-cliSUSE CRLF injection in urllib3 6.5 Medium -
aws-cliSUSE Recommended update for aws-cli, python-boto3, python-botocore, python-s3transfer 5.3 Medium