16919 matches found
MAL-2025-190540 Malicious code in node-calculator-c3ef (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 73ec8a1373e5c6acdb6356064e038505a699c6f8c4b377726514e5fc7ccd2335 The package node-calculator-c3ef was found to contain malicious code...
MAL-2025-190537 Malicious code in node-calculator-9c62 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5b03397fc5fdb1c7413b6d71169bf8e3621ee9c1b0a1e0a71a875d6ec098cd5b The package node-calculator-9c62 was found to contain malicious code...
MAL-2025-190530 Malicious code in node-calculator-25bb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66837bab4ec87d14b4ee6169dfa30cefc179fe0d6c18386e74430340d4625e26 The package node-calculator-25bb was found to contain malicious code...
MAL-2025-190528 Malicious code in node-calculator-215d (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3198d6c12dadf6d9c769d208f18cd0ad966ccffa92b0db40b2cb25f0fb9335a The package node-calculator-215d was found to contain malicious code...
What It Takes to Design Trust into Event-Driven Architectures with Amazon EventBridge
How disciplined design turns Amazon EventBridge from an open event bus into a system of verified trust. Event-driven architecture has become essential for achieving agility in the cloud. Yet as integrations multiply, so do the hidden pathways that adversaries can exploit. Amazon EventBridge helps...
MAL-2025-190524 Malicious code in node-calculator-8ddb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93cecdcd0f2d763dafb0dadb9723d844fe53a10c842578f1ffb0c768d86f9da5 The package node-calculator-8ddb was found to contain malicious code. Source: ossf-package-analysis...
MAL-2025-190521 Malicious code in node-calculator-7bea (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ddbd5a2cd94466471bef272010b7911c371022bffeeee5ec50e01a0affde411 The package node-calculator-7bea was found to contain malicious code. Source: ossf-package-analysis...
Malicious code in node-calculator-x7k9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61652e0e15358217e6b9754390cba499bb2411fe1815da0ff1f39f5fde071478 The package node-calculator-x7k9 was found to contain malicious code. Source: ghsa-malware...
MAL-2025-190547 Malicious code in node-calculator-x7k9 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61652e0e15358217e6b9754390cba499bb2411fe1815da0ff1f39f5fde071478 The package node-calculator-x7k9 was found to contain malicious code. Source: ghsa-malware...
GHSA-HCQG-5G63-7J9H OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
Access Control Bypass
Overview keystone is a package that provides authentication, authorization and service discovery mechanisms via HTTP primarily for use by projects in the OpenStack family. Affected versions of this package are vulnerable to Access Control Bypass via the ec2tokens or s3tokens process when a reques...
Keystone security vulnerabilities
Keystone is a powerful CMS open source for OpenStack. used to help you build and scale faster than any other Cms or application framework. A security vulnerability exists in Keystone versions prior to 26.0.1, 27.0.0, and 28.0.0 that stems from allowing requests with valid AWS signatures to provid...
CVE-2025-65073
OpenStack Keystone prior to 26.0.1, 27.0.0, or 28.0.0 is vulnerable to requests to /v3/ec2tokens or /v3/s3tokens bearing a valid AWS Signature that can authorize access. The issue (CVE-2025-65073) enables unauthorized access and potential privilege escalation. CVSS v3.1 base score 7.5 (Network, h...
CVE-2025-65073
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
EUVD-2025-197772
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
CVE-2025-65073
OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization...
AWS VDP: Command Injection on Amazon Q Developer CLI via malicious .amazonq/mcp.json leads to arbitrary code execution
Asset URL: https://github.com/aws/amazon-q-developer-cli/ Summary: Running Q chat from Amazon Q Developer CLI from an attacker-controlled repository/directory that contains a crafted .amazonq/mcp.json enables arbitrary command injection/execution. Amazon Q Developer CLI automatically loads and...
