GHSA-PP64-WJ43-XQCR AWS SAM CLI Path Traversal allows file copy to local cache

Summary The AWS Serverless Application Model Command Line Interface AWS SAM CLI is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker. After completing a build with AWS SAM CLI which include symlinks, the content o...

better-lambda-deploy (>=0.0.4, <=0.2.1) potentially affected by CVE-2025-3048 via aws-sam-cli (0.40.0)

aws-sam-cli PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.0.4, =0.2.1 Source cves: CVE-2025-3048 Source advisory: OSV:GHSA-PP64-WJ43-XQCR...

better-lambda-deploy (>=0.6.0, <=0.6.9) potentially affected by CVE-2025-3048 via aws-sam-cli (0.53.0)

aws-sam-cli PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.6.0, =0.6.9 Source cves: CVE-2025-3048 Source advisory: OSV:GHSA-PP64-WJ43-XQCR...

better-lambda-deploy (>=0.7.0, <=0.8.5), localambda (0.0.1) potentially affected by CVE-2025-3048 via aws-sam-cli (>=1.12.0, <=1.38.1)

aws-sam-cli PYPI version =1.12.0, =0.7.0, =0.8.5 - localambda 0.0.1 Source cves: CVE-2025-3048 Source advisory: OSV:GHSA-PP64-WJ43-XQCR...

better-lambda-deploy (>=0.7.0, <=0.8.5), localambda (0.0.1) potentially affected by CVE-2025-3048 via aws-sam-cli (>=1.12.0, <=1.38.1)

aws-sam-cli PYPI version =1.12.0, =0.7.0, =0.8.5 - localambda 0.0.1 Source cves: CVE-2025-3048 Source advisory: SNYK:PYTHON-AWSSAMCLI-9576384...

tc-sam-cli (>=0.0.7, <=0.0.10) potentially affected by CVE-2025-3048 via aws-sam-cli (0.17.0)

aws-sam-cli PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli =0.0.7, =0.0.10 Source cves: CVE-2025-3048 Source advisory: OSV:GHSA-PP64-WJ43-XQCR...

GHSA-PX37-JPQX-97Q9 AWS SAM CLI Path Traversal allows file copy to build container

Summary The AWS Serverless Application Model Command Line Interface AWS SAM CLI is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker. When running the AWS SAM CLI build process with Docker and symlinks are include...

better-lambda-deploy (>=0.0.4, <=0.2.1) potentially affected by CVE-2025-3047 via aws-sam-cli (0.40.0)

aws-sam-cli PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.0.4, =0.2.1 Source cves: CVE-2025-3047 Source advisory: OSV:GHSA-PX37-JPQX-97Q9...

better-lambda-deploy (>=0.6.0, <=0.6.9) potentially affected by CVE-2025-3047 via aws-sam-cli (0.53.0)

aws-sam-cli PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.6.0, =0.6.9 Source cves: CVE-2025-3047 Source advisory: OSV:GHSA-PX37-JPQX-97Q9...

tc-sam-cli (>=0.0.7, <=0.0.10) potentially affected by CVE-2025-3047 via aws-sam-cli (0.17.0)

aws-sam-cli PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli =0.0.7, =0.0.10 Source cves: CVE-2025-3047 Source advisory: OSV:GHSA-PX37-JPQX-97Q9...

tc-sam-cli (0.0.11) potentially affected by CVE-2025-3047 via aws-sam-cli (0.22.0)

aws-sam-cli PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli 0.0.11 Source cves: CVE-2025-3047 Source advisory: OSV:GHSA-PX37-JPQX-97Q9...

better-lambda-deploy (>=0.7.0, <=0.8.5), localambda (0.0.1) potentially affected by CVE-2025-3047 via aws-sam-cli (>=1.12.0, <=1.38.1)

aws-sam-cli PYPI version =1.12.0, =0.7.0, =0.8.5 - localambda 0.0.1 Source cves: CVE-2025-3047 Source advisory: GHSA-PX37-JPQX-97Q9...

tc-sam-cli (0.0.12) potentially affected by CVE-2025-3047 via aws-sam-cli (0.37.0)

aws-sam-cli PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli 0.0.12 Source cves: CVE-2025-3047 Source advisory: OSV:GHSA-PX37-JPQX-97Q9...

better-lambda-deploy (>=0.2.2, <=0.5.9) potentially affected by CVE-2025-3047 via aws-sam-cli (0.41.0)

aws-sam-cli PYPI version 0.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.2.2, =0.5.9 Source cves: CVE-2025-3047 Source advisory: OSV:GHSA-PX37-JPQX-97Q9...

better-lambda-deploy (>=0.7.0, <=0.8.5), localambda (0.0.1) potentially affected by CVE-2025-3047 via aws-sam-cli (>=1.12.0, <=1.38.1)

aws-sam-cli PYPI version =1.12.0, =0.7.0, =0.8.5 - localambda 0.0.1 Source cves: CVE-2025-3047 Source advisory: OSV:GHSA-PX37-JPQX-97Q9...

CVE-2025-3048 Path Traversal in AWS SAM CLI allows file copy to local cache

After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...

CVE-2025-3048 Path Traversal in AWS SAM CLI allows file copy to local cache

After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...

better-lambda-deploy (>=0.0.4, <=0.8.5), localambda (0.0.1) +1 more potentially affected by CVE-2025-3048 via aws-sam-cli (>=0.17.0, <=1.38.1)

aws-sam-cli PYPI version =0.17.0, =0.0.4, =0.0.7, =0.0.12 Source cves: CVE-2025-3048 Source advisory: MEND:CVE-2025-3048...

CVE-2025-3047 Path Traversal in AWS SAM CLI allows file copy to build container

When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...

CVE-2025-3047 Path Traversal in AWS SAM CLI allows file copy to build container

When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...