aws-key-disabler

AWS Lambda - IAM 액세스 키 비활성화기 AWS 키 비활성화기는 설정된 시간 이후에 AWS IAM 사용자 액세스 키를 비활성화하는 Lambda 함수로, 오래된 액세스 키와 관련된 위험을 줄이기 위한 것입니다. AWS Lambda 아키텍처 최종 사용자를 위한 SysOps 출력 개발자 툴체인 현재 제한 사항 스캔 결과JSON가 포함된 보고서는 단일 정의된 시스템 관리자 계정으로 전송됩니다. 빌드 구성 파일 /grunt/package.json의 reportto 속성을 참조하세요. 키는 비활성화만 되며, 삭제되거나 교체되지...

CVE-2026-22008-AWS-Lambda-Layer-Injection-via-Shared-Layer-ARN

CVE-2026-22008 – Inyección de capa de AWS Lambda mediante ARN de capa compartido Código del programa Python root@kitploit: deployvulnerablelambda.py - Lambda function using a layer from untrusted account import boto3 lambdaclient = boto3.client'lambda' Attacker publishes a public layer containing...

CVE

Control Tower Notification Enabler Este paquete cdk instala una función Lambda, con un rol IAM asociado, y suscribe la función Lambda a las notificaciones de seguridad agregadas de Control Tower. En caso de una violación de una regla de Control Tower por ejemplo, un bucket S3 de acceso público, l...

CVE-2026-90513

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

DVFaaS-Damn-Vulnerable-Functions-as-a-Service

DVFaaS - Funciones Damn Vulnerables como Servicio Un proyecto DHIY Despliega y Hackéalo Tú Mismo en el que puedes desplegar y ejecutar un montón de funciones terriblemente inseguras en AWS Lambda Objetivo y audiencias En we45 hacemos mucha formación sobre seguridad en Serverless, Cloud y la...

CVE-2026-90513 simalexan api-lambda-send-email-ses API Gateway Endpoint template.yml SES.sendEmail missing authentication

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

CVE-2026-90513

CVE-2026-90513 affects simalexan api-lambda-send-email-ses (up to commit bda6869aa81371d1e872242e74fe7d953edb818d ). The flaw resides in the SES.sendEmail function within the API Gateway Endpoint component (file template.yml ), where a missing authentication mechanism allows remote manipulation o...

EUVD-2026-76985

A flaw has been found in simalexan api-lambda-send-email-ses up to bda6869aa81371d1e872242e74fe7d953edb818d. This issue affects the function SES.sendEmail of the file template.yml of the component API Gateway Endpoint. This manipulation of the argument...

GHSA-PX8P-9VWX-VF98 vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, librechat, tileserver-gl, lambda-nodejs, langfuse, langfuse-fips...

CVE-2026-45820 vulnerabilities

Vulnerabilities for packages: tileserver-gl-fips, librechat, tileserver-gl, lambda-nodejs, langfuse, langfuse-fips...

CVE-2026-82802

A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLambda of the file serverless/src/openSearchGranuleSearch/handler.js of the component granules Endpoint. Executing a manipulation of the argument openSearchOsdd can lead to...

EUVD-2026-68607

A flaw has been found in NASA earthdata-search 1.0.0. Affected by this issue is the function OpenSearchGranuleSearchLambda of the file serverless/src/openSearchGranuleSearch/handler.js of the component granules Endpoint. Executing a manipulation of the argument openSearchOsdd can lead to...

Astra Linux – Vulnerability in pillow

In Pillow’s PIL.ImageMath.eval before version 9.0.0, it was possible to evaluate arbitrary expressions, including those that used the Python exec method. A lambda expression could also be used...

CVE-2026-77415

JSONata is a JSON query and transformation language. Prior to 1.8.8 and 2.2.1, crafted JSONata expressions could chain several object-integrity weaknesses to execute arbitrary code. The chain could overwrite $clone to mutate objects through evaluateTransformExpression, expose and deconstruct...

CVE-2026-77810

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

CVE-2026-77810

CVE-2026-77810 is a code injection vulnerability in the Neptune connector of aws-athena-query-federation , caused by a Gremlin query passthrough . A user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying compute for the connector, result...

CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

EUVD-2026-64067

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

CVE-2026-77810 Code Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...

PT-2026-79440

In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties in the Lambda supplying the compute for the connector. To remediate this issue, users should upgrade to aws-athena-query-federation v2026.30.1 or later...