Medium: cni-plugins

Issue Overview: Calling Verify with a VerifyOptions.KeyUsages that contains ExtKeyUsageAny unintentionally disabledpolicy validation. This only affected certificate chains which contain policy graphs, which are rather uncommon. CVE-2025-22874 Proxy-Authorization and Proxy-Authenticate headers...

Amazon Linux 2 : kernel (ALASKERNEL-5.10-2025-097)

The version of kernel installed on the remote host is prior to 5.10.238-234.956. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2KERNEL-5.10-2025-097 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: fix -anonvma race...

Amazon Linux 2023 : vim-common, vim-data, vim-default-editor (ALAS2023-2025-1138)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2025-1138 advisory. Vim is an open source, command line text editor. Prior to version 9.1.1552, a path traversal issue in Vim's tar.vim plugin can allow overwriting of arbitrary files when opening specially craft...

Reducing False Positives with Active Behavioral Analysis for Cloud Security

Rule-based cloud security posture management CSPM solutions are known to produce a lot of false positives based on the limited contextual understanding and dependence on static heuristics testing. This paper introduces a validation-driven methodology that integrates active behavioral testing in...

CVE-2025-8904

Amazon EMR Secret Agent creates a keytab file containing Kerberos credentials. This file is stored in the /tmp/ directory. A user with access to this directory and another account can potentially decrypt the keys and escalate to higher privileges. Users are advised to upgrade to Amazon EMR versio...

Malicious code in data-solutions-framework-on-aws (npm)

The package data-solutions-framework-on-aws was found to contain malicious code...

Malicious code in @amber-team/amazon-utils (npm)

The package @amber-team/amazon-utils was found to contain malicious code...

Malicious code in @sellerly-kit/amazon-token-connect (npm)

The package @sellerly-kit/amazon-token-connect was found to contain malicious code...

MAL-2025-34766 Malicious code in test-aws-xray-sdk-express (npm)

The package test-aws-xray-sdk-express was found to contain malicious code...

MAL-2025-15232 Malicious code in aws-xray-sdk-node (npm)

The package aws-xray-sdk-node was found to contain malicious code...

MAL-2025-9293 Malicious code in @sellerly-kit/amazon-token-connect (npm)

The package @sellerly-kit/amazon-token-connect was found to contain malicious code...

MAL-2025-7105 Malicious code in @aws-ee/base-services (npm)

The package @aws-ee/base-services was found to contain malicious code...

Malicious code in strapi-upload-aws-s3 (npm)

The package strapi-upload-aws-s3 was found to contain malicious code...

MAL-2025-14424 Malicious code in amazon-titan-inpainting-pipeline (npm)

The package amazon-titan-inpainting-pipeline was found to contain malicious code...

Malicious code in aws-xray-sdk-node (npm)

The package aws-xray-sdk-node was found to contain malicious code...

Malicious code in amazon-titan-inpainting-pipeline (npm)

The package amazon-titan-inpainting-pipeline was found to contain malicious code...

MAL-2025-7048 Malicious code in @amber-team/amazon-utils (npm)

The package @amber-team/amazon-utils was found to contain malicious code...

MAL-2025-15225 Malicious code in aws-core-vscode (npm)

The package aws-core-vscode was found to contain malicious code...

GHSA-WM7X-WW72-R77Q Information Disclosure in Amazon ECS Container Agent

Summary Amazon Elastic Container Service Amazon ECS is a fully managed container orchestration service that enables customers to deploy, manage, and scale containerized applications. Amazon ECS container agent provides an introspection API that provides information about the overall state of the...

Information Disclosure in Amazon ECS Container Agent

Summary Amazon Elastic Container Service Amazon ECS is a fully managed container orchestration service that enables customers to deploy, manage, and scale containerized applications. Amazon ECS container agent provides an introspection API that provides information about the overall state of the...