Localstack vulnerabilities

Products

• Localstack 3

Newest

• localstack serverless-localstack localstack serverless-localstack Configuration index.js os command injection CVE-2026-16763 4.8 MediumJuly 23, 2026
• localstack Missing SSL certificate validation in localstack CVE-2023-48054 7.4 HighNovember 16, 2023
• localstack Command injection in LocalStack CVE-2021-32090 Fix available 9.8 CriticalMay 7, 2021
• localstack Cross-site scripting in LocalStack CVE-2021-32091 Fix available 6.1 MediumMay 7, 2021