97 matches found
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
CVE-2026-16763
CVE-2026-16763 affects localstack serverless-localstack up to version 1.4.0. The vulnerability targets an unknown function in src/index.js of the Configuration Handler, where manipulating the argument custom.localstack.docker.compose_file enables local OS command injection. The CVE describes loca...
CVE-2026-16763 localstack serverless-localstack Configuration index.js os command injection
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
PT-2026-64183
Name of the Vulnerable Software and Affected Versions localstack serverless-localstack versions prior to 1.4.1 Description An OS command injection issue exists within the Configuration Handler component in the src/index.js file. This occurs when the custom.localstack.docker.compose file argument ...
CVE-2026-16763: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was identified in localstack serverless-localstack up to 1.4.0. The affected element is an unknown function of the file src/index.js of the component Configuration Handler. The manipulation of the argument custom.localstack.docker.composefile leads to os command injection. An atta...
GHSA-6W46-J5RX-G56G vulnerabilities
Vulnerabilities for packages: open-webui, apache-beam-python-3.13-sdk, request-1276, localstack, apache-beam-python-3.12-sdk, py3-cassandra-medusa, apache-beam-python-3.11-sdk...
CVE-2025-71176 vulnerabilities
Vulnerabilities for packages: open-webui, apache-beam-python-3.13-sdk, request-1276, localstack, apache-beam-python-3.12-sdk, py3-cassandra-medusa, apache-beam-python-3.11-sdk...
CVE-2026-28356 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-P2M9-WCP5-6QW3 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2026-33155 vulnerabilities
Vulnerabilities for packages: dbt-snowflake, localstack, dbt-bigquery, dbt-core...
GHSA-54JJ-PX8X-5W5Q vulnerabilities
Vulnerabilities for packages: dbt-snowflake, localstack, dbt-bigquery, dbt-core...
CVE-2026-27932 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-W5R5-M38G-F9F9 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-747P-WMPV-9C78 vulnerabilities
Vulnerabilities for packages: localstack...
GHSA-FRFH-8V73-GJG4 vulnerabilities
Vulnerabilities for packages: localstack...
CVE-2025-65015 vulnerabilities
Vulnerabilities for packages: localstack...
