GHSA-75PG-WVH3-34JR vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, kine, terraform-provider-acme, external-dns, spire-server, src, gitness, crossplane-provider-azure-authorization, kyverno, loki, hugo-extended, crossplane-provider-aws-sqs, runc, wuzz, gitea,...

GHSA-MH7X-F8WQ-4JHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, gitness, crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, crossplane-provider-aws-iam, grafana, crossplane-provider-aws-cloudfront,...

GHSA-FH4F-47MF-F2GJ vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, gitness, crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, crossplane-provider-aws-iam, grafana, crossplane-provider-aws-cloudfront,...

CVE-2026-100348 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, gitness, crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, crossplane-provider-aws-iam, grafana, crossplane-provider-aws-cloudfront,...

GHSA-23VG-4CJM-66Q5 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, gitness, crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, crossplane-provider-aws-iam, grafana, crossplane-provider-aws-cloudfront,...

CVE-2026-100351 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, gitness, crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, crossplane-provider-aws-iam, grafana, crossplane-provider-aws-cloudfront,...

CVE-2026-100347 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cloudwatchlogs, crossplane-provider-aws-eks, gitness, crossplane-provider-azure-authorization, crossplane-provider-aws-sqs, crossplane-provider-aws-elasticache, crossplane-provider-aws-iam, grafana, crossplane-provider-aws-cloudfront,...

GO-2026-5013 vulnerabilities

Vulnerabilities for packages: sops, crossplane-provider-aws-cloudwatchlogs, rancher, loki, neuvector-sigstore-interface, crossplane-provider-aws-sqs, ko, falco-no-driver, crossplane-provider-aws-elasticache, crossplane-provider-aws-cloudfront, teleport, crossplane-provider-aws-memorydb, gh,...

PT-2026-25433

Summary aws-kms-tls-auth is an optional utility for s2n-tls that enables customers to use AWS KMS keys as part of the PSK extension field in a TLS 1.3 handshake. An issue exists in this library that can lead to overallocation of memory potentially resulting in a denial of service. Impact The PSK...

MAL-2023-8227 Malicious code in nequi-aws-kms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f31f502dc3ccd6a55cacb7aaeb1c7e6d18a66345ca5b79b21809095bcf232fa7 The OpenSSF Package Analysis project identified 'nequi-aws-kms' @ 0.1.6 npm as malicious. It is considered malicious because: - The package...

Malicious code in nequi-aws-kms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis f31f502dc3ccd6a55cacb7aaeb1c7e6d18a66345ca5b79b21809095bcf232fa7 The OpenSSF Package Analysis project identified 'nequi-aws-kms' @ 0.1.6 npm as malicious. It is considered malicious because: - The package...

GHSA-WQGP-VPHW-HPHF Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness

Authors: Thai "thaidn" Duong Summary The following security vulnerabilities was discovered and reported to Amazon, affecting AWS KMS and all versions of AWS Encryption SDKs prior to version 2.0.0: Information leakage: an attacker can create ciphertexts that would leak the user’s AWS account ID,...

Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness

Authors: Thai "thaidn" Duong Summary The following security vulnerabilities was discovered and reported to Amazon, affecting AWS KMS and all versions of AWS Encryption SDKs prior to version 2.0.0: Information leakage: an attacker can create ciphertexts that would leak the user’s AWS account ID,...

WS-2021-0141

This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In addition to...

GHSA-H45P-W933-JXH3 Improper Verification of Cryptographic Signature in aws-encryption-sdk-javascript

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...

GHSA-89V2-G37M-G3FF Improper Verification of Cryptographic Signature in aws-encryption-sdk-cli

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...

Improper Verification of Cryptographic Signature in aws-encryption-sdk-cli

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...

GHSA-X5H4-9GQW-942J Improper Verification of Cryptographic Signature in aws-encryption-sdk

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...

Improper Verification of Cryptographic Signature in aws-encryption-sdk

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before the ECDSA signature is validated. In...

Improper Verification of Cryptographic Signature in aws-encryption-sdk-java

Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This update addresses an issue where certain invalid ECDSA signatures incorrectly passed validation. These signatures provide defense in depth...