CVE-2026-119148

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6...

CVE-2026-119148

The AWS aws-nitro-enclaves-sdk-c component (versions prior to 0.4.6 ) is vulnerable to an issue where incomplete string validation allows a third party to impersonate the enclave's AWS KMS endpoint due to an unvalidated parent-supplied AWS Region. To remediate this, users should rebuild any custo...

CVE-2026-119148 Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6...

CVE-2026-119148 Unvalidated parent-supplied AWS Region in AWS aws-nitro-enclaves-sdk-c allows impersonation of the enclave's AWS KMS endpoint

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6...

EUVD-2026-114187

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6...

CVE-2026-119148: AWS aws-nitro-enclaves-sdk-c: Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the…

Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0.4.6 may allow a third party to impersonate the AWS KMS endpoint. To remediate this issue, users should rebuild any custom enclave image against aws-nitro-enclaves-sdk-c 0.4.6...

GHSA-75PG-WVH3-34JR vulnerabilities

Vulnerabilities for packages: containerd, hugo, crossplane-provider-azure-managedidentity, rclone, external-dns, crossplane-provider-aws-cloudfront, crossplane-provider-aws-cloudwatchlogs, gitness, crossplane-provider-aws-dynamodb, crossplane-provider-aws-cloudformation, kyverno, k3s,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, crossplane-provider-azure-managedidentity, kubevela, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, gitness, crossplane-provider-aws-dynamodb, crossplane-provider-azure-sql, crossplane-provider-aws-s3,...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, crossplane-provider-azure-managedidentity, kubevela, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, gitness, crossplane-provider-aws-dynamodb, crossplane-provider-azure-sql, crossplane-provider-aws-s3,...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, crossplane-provider-azure-managedidentity, kubevela, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, gitness, crossplane-provider-aws-dynamodb, crossplane-provider-azure-sql, crossplane-provider-aws-s3,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, crossplane-provider-azure-managedidentity, kubevela, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, gitness, crossplane-provider-aws-dynamodb, crossplane-provider-azure-sql, crossplane-provider-aws-s3,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, crossplane-provider-azure-managedidentity, kubevela, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, gitness, crossplane-provider-aws-dynamodb, crossplane-provider-azure-sql, crossplane-provider-aws-s3,...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: terraform-provider-grafana, crossplane-provider-azure-managedidentity, kubevela, crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-cloudfront, gitness, crossplane-provider-aws-dynamodb, crossplane-provider-azure-sql, crossplane-provider-aws-s3,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, gomplate, crossplane-provider-azure-managedidentity, external-dns, crossplane-provider-aws-dynamodb, terragrunt, mattermost, tflint, crossplane-provider-aws-s3, rancher, terraform-provider-tls, zot, terraform-provider-azurerm, atlantis,...

PT-2026-25433

Summary aws-kms-tls-auth is an optional utility for s2n-tls that enables customers to use AWS KMS keys as part of the PSK extension field in a TLS 1.3 handshake. An issue exists in this library that can lead to overallocation of memory potentially resulting in a denial of service. Impact The PSK...

MAL-2023-8227 Malicious code in nequi-aws-kms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f31f502dc3ccd6a55cacb7aaeb1c7e6d18a66345ca5b79b21809095bcf232fa7 The OpenSSF Package Analysis project identified 'nequi-aws-kms' @ 0.1.6 npm as malicious. It is considered malicious because: - The package...

Malicious code in nequi-aws-kms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f31f502dc3ccd6a55cacb7aaeb1c7e6d18a66345ca5b79b21809095bcf232fa7 The OpenSSF Package Analysis project identified 'nequi-aws-kms' @ 0.1.6 npm as malicious. It is considered malicious because: - The package...

Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness

Authors: Thai "thaidn" Duong Summary The following security vulnerabilities was discovered and reported to Amazon, affecting AWS KMS and all versions of AWS Encryption SDKs prior to version 2.0.0: Information leakage: an attacker can create ciphertexts that would leak the user’s AWS account ID,...

GHSA-WQGP-VPHW-HPHF Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness

Authors: Thai "thaidn" Duong Summary The following security vulnerabilities was discovered and reported to Amazon, affecting AWS KMS and all versions of AWS Encryption SDKs prior to version 2.0.0: Information leakage: an attacker can create ciphertexts that would leak the user’s AWS account ID,...

WS-2021-0141

This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In addition to...