74 matches found
GHSA-747P-WMPV-9C78 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-FRFH-8V73-GJG4 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2025-65015 vulnerabilities
Vulnerabilities for packages: localstack...
EUVD-2021-0113
Malware in sbrugna...
EUVD-2021-0114
Malware in sbrugna...
EUVD-2023-0126
Malicious code in bioql PyPI...
GHSA-847F-9342-265H vulnerabilities
Vulnerabilities for packages: airflow, localstack...
Malicious code in localstack-plugin-persistence (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6537 Malicious code in localstack-plugin-persistence (PyPI)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2021-32091
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
CVE-2021-32090
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...
CVE-2024-56201 vulnerabilities
Vulnerabilities for packages: dask-gateway, checkov, mlflow, airflow, apache-beam-python-3.11-sdk, emissary, kubeflow-volumes-web-app, py3-jinja2, superset, nemo, ansible-operator, kserve, kubeflow-jupyter-web-app, localstack, reflex...
Missing Certificate Validation
localstack is vulnerable to Missing Certificate Validation. An attacker can eavesdrop on communications between the host and server by performing a man-in-the-middle attack...
GHSA-8633-G3PH-97RP Missing SSL certificate validation in localstack
Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
Missing SSL certificate validation in localstack
Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
