checkov

Checkov is a static code analysis tool for infrastructure as code IaC and also a software composition analysis SCA tool for images and open source packages. It scans cloud infrastructure provisioned using Terraform, Terraform plan, Cloudformation, AWS SAM, Kubernetes, Helm charts, Kustomize,...

serverless-application-model

AWS SAM transform The AWS Serverless Application Model AWS SAM transform is a AWS CloudFormation macro that transforms SAM templates into CloudFormation templates. To use the SAM transform, add AWS::Serverless-2016-10-31 to the Transform section of your CloudFormation template. Benefits of using...

AWS-SAM-CLI-Vulnerabilities

AWS SAM CLI Vulnerabilities CVE-2025-3047 & CVE-2025-3048 This README provides a detailed analysis of two security vulnerabilities found in the AWS Serverless Application Model CLI AWS SAM CLI – CVE-2025-3047 and CVE-2025-3048 – along with the code-level issues and fixes. Both vulnerabilities...

Command Injection

Overview aws-sam-cli is an AWS SAM CLI is a CLI tool for local development and testing of Serverless applications Affected versions of this package are vulnerable to Command Injection via the Makefile generator in makefilegenerator.py, which interpolates an attacker-controlled Terraform resource...

better-lambda-deploy (>=0.7.0, <=0.8.5), easysam (>=1.1.0, <=1.9.2) +2 more potentially affected by CVE-2026-115414 via aws-sam-cli (>=1.12.0, <=1.141.0)

aws-sam-cli PYPI version =1.12.0, =0.7.0, =1.1.0, =0.1.0, =0.17.0 Source cves: CVE-2026-115414 Source advisory: SNYK:PYTHON-AWSSAMCLI-21460721...

CVE-2026-115414

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To...

CVE-2026-115414 OS command injection in the Terraform hook in AWS SAM CLI

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To...

CVE-2026-115414

A vulnerability in the Terraform hook of the AWS SAM CLI (versions before 1.166.2 ) allows for OS command injection . An actor capable of influencing the Terraform configuration or plan file used during a build can execute arbitrary commands as the build user on the host system by providing a cra...

EUVD-2026-108281

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To...

easysam (>=1.1.0, <=1.9.2), samwich-cli (>=0.1.0, <=0.17.0) potentially affected by CVE-2026-115414 via aws-sam-cli (>=1.136.0, <=1.141.0)

aws-sam-cli PYPI version =1.136.0, =1.1.0, =0.1.0, =0.17.0 Source cves: CVE-2026-115414 Source advisory: MEND:CVE-2026-115414...

CVE-2026-115414

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To...

CVE-2026-115414 OS command injection in the Terraform hook in AWS SAM CLI

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To...

CVE-2026-115414 OS command injection in the Terraform hook in AWS SAM CLI

OS command injection in the Terraform hook in AWS SAM CLI before 1.166.2 might allow an actor who can influence the Terraform configuration or plan file consumed by a build to execute arbitrary commands as the build user on the host running the build via a crafted Terraform resource address. To...

Amazon AWS SAM CLI command injection vulnerability

Versions of Amazon AWS SAM CLI prior to 1.166.2 contain a command injection vulnerability. This vulnerability stems from OS command injection within Terraform hooks; attackers can influence the Terraform configuration or plan files used during builds. By using specially crafted Terraform resource...

PT-2026-121511

Name of the Vulnerable Software and Affected Versions AWS SAM CLI versions prior to 1.166.2 Description An OS command injection exists in the Terraform hook. An actor capable of influencing the Terraform configuration or plan file used during a build can execute arbitrary commands as the build us...

AWS SAM CLI Path Traversal allows file copy to local cache

SummaryThe AWS Serverless Application Model Command Line Interface AWS SAM CLI is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker.After completing a build with AWS SAM CLI which include symlinks, the content of...

better-lambda-deploy (>=0.0.4, <=0.2.1) potentially affected by CVE-2025-3047 via aws-sam-cli (0.40.0)

aws-sam-cli PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.0.4, =0.2.1 Source cves: CVE-2025-3047 Source advisory: OSV:PYSEC-2026-1207...

better-lambda-deploy (>=0.6.0, <=0.6.9) potentially affected by CVE-2025-3048 via aws-sam-cli (0.53.0)

aws-sam-cli PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.6.0, =0.6.9 Source cves: CVE-2025-3048 Source advisory: OSV:PYSEC-2026-1206...

better-lambda-deploy (>=0.6.0, <=0.6.9) potentially affected by CVE-2025-3047 via aws-sam-cli (0.53.0)

aws-sam-cli PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.6.0, =0.6.9 Source cves: CVE-2025-3047 Source advisory: OSV:PYSEC-2026-1207...

better-lambda-deploy (>=0.0.4, <=0.2.1) potentially affected by CVE-2025-3048 via aws-sam-cli (0.40.0)

aws-sam-cli PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.0.4, =0.2.1 Source cves: CVE-2025-3048 Source advisory: OSV:PYSEC-2026-1206...