aws-cli vulnerabilities (openSUSE)
8 vulnerabilities.
-
aws-cliopenSUSE On Node.js < 3, pbkdf2 silently disregards Uint8Array input, returning static keys 9.1 Critical -
aws-cliopenSUSE pbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js 9.1 Critical -
aws-cliopenSUSE juliangruber brace-expansion index.js expand redos 2.3 Low -
aws-cliopenSUSE Regular Expression Denial of Service (ReDoS) in cross-spawn 8.7 High -
aws-cliopenSUSE Valid ECDSA signatures erroneously rejected in Elliptic 4.8 Medium -
aws-cliopenSUSE Elliptic's verify function omits uniqueness validation 9.1 Critical -
aws-cliopenSUSE CRLF injection in urllib3 6.5 Medium -
aws-cliopenSUSE Recommended update for aws-cli, python-boto3, python-botocore, python-s3transfer 5.3 Medium