Skip to content
Awslabs vulnerabilities
Newest
-
aws aws-sdk-rust
Uncontrolled recursion in smithy-rs generated JSON, CBOR, and XML deserializers allows unauthenticated remote denial of service via recursive shapes
CVE-2026-15957
8.7 High
-
amazon aws deployment framework, awslabs aws-deployment-framework +1 more
aws-deployment-framework's potential risk can lead to privilege escalation
CVE-2024-37293
7.6 High
-
amazon awslabs sandbox accounts for events, awslabs sandbox-accounts-for-events +1 more
Sandbox Accounts for Events vulnerable to privilege escalation to read running events data
CVE-2023-51386
7.8 High
-
awslabs sandbox-accounts-for-events, amazon awslabs sandbox accounts for events +1 more
sandbox-accounts-for-events security misconfiguration leads to budget exceed
CVE-2023-50928
7.1 High
-
amazon aws-dataall
AWS data.all vulnerable to RCE through user injection of Python Commands
CVE-2023-36467
8.0 High
-
amazon aws-sigv4, awslabs aws-sdk-rust +1 more
AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending
CVE-2023-30610
Fix available
5.5 Medium
-
amazon fhir-works-on-aws-authz-smart
Security issue in fhir-works-on-aws-authz-smart
CVE-2022-39230
Fix available
6.5 Medium
-
amazon sockeye
Code injection via unsafe YAML loading
CVE-2021-43811
Public exploitFix available
7.8 High
-
amazon tough
Improper sanitization of delegated role names in tough
CVE-2021-41150
Fix available
8.2 High
-
amazon tough
Improper sanitization of target names in tough
CVE-2021-41149
Fix available
8.2 High
-
amazon tough
Improper verification of signature threshold in tough
CVE-2020-15093
Fix available
8.6 High