100 matches found
CVE-2025-65015 vulnerabilities
Vulnerabilities for packages: localstack...
EUVD-2021-0113
Malware in sbrugna...
EUVD-2021-0114
Malware in sbrugna...
EUVD-2023-0126
Malicious code in bioql PyPI...
GHSA-847F-9342-265H vulnerabilities
Vulnerabilities for packages: localstack, airflow...
Malicious code in localstack-plugin-persistence (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6537 Malicious code in localstack-plugin-persistence (PyPI)
--- -= Per source details. Do not edit below this line.=-...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2021-32091
A Cross-site scripting XSS vulnerability exists in StackLift LocalStack 0.12.6...
CVE-2021-32090
The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter...
CVE-2024-56201 vulnerabilities
Vulnerabilities for packages: localstack, kserve, ansible-operator, apache-beam-python-3.11-sdk, airflow, mlflow, py3-jinja2, dask-gateway, reflex, checkov, superset, nemo, emissary, kubeflow-jupyter-web-app, kubeflow-volumes-web-app...
Missing Certificate Validation
localstack is vulnerable to Missing Certificate Validation. An attacker can eavesdrop on communications between the host and server by performing a man-in-the-middle attack...
Missing SSL certificate validation in localstack
Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
GHSA-8633-G3PH-97RP Missing SSL certificate validation in localstack
Missing SSL certificate validation in localstack allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
PYSEC-2023-243
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
PYSEC-2023-243
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
CVE-2023-48054
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack...
PT-2023-30684
Name of the Vulnerable Software and Affected Versions localstack version 2.3.2 Description The issue is related to missing SSL certificate validation, which allows attackers to intercept communications between the host and server through a man-in-the-middle attack. This enables attackers to...