CVE-2025-3047 Path Traversal in AWS SAM CLI allows file copy to build container

When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...

Argument Injection

aws-sam-cli is vulnerable to Argument Injection. The vulnerability is due to the ability for users to specify arguments in the SAM template that are passed to the Docker engine during the build, potentially leading to malicious code execution...

better-lambda-deploy (>=0.7.0, <=0.8.5), localambda (0.0.1) potentially affected by unknown CVE via aws-sam-cli (>=1.12.0, <=1.38.1)

aws-sam-cli PYPI version =1.12.0, =0.7.0, =0.8.5 - localambda 0.0.1 Source cves: unknown CVE Source advisory: GHSA-RJC6-VM4H-85CG...

GHSA-RJC6-VM4H-85CG Sensitive Information Exposure Through Insecure Logging For Secrets Like Metadata.DockerBuildArgs

Summary The AWS Serverless Application Model SAM CLI is an open source tool that allows customers to build, deploy and test their serverless applications built on AWS. AWS SAM CLI can build container Docker images and customers can specify arguments in the SAM template that are passed to the Dock...

better-lambda-deploy (>=0.6.0, <=0.6.9) potentially affected by unknown CVE via aws-sam-cli (0.53.0)

aws-sam-cli PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.6.0, =0.6.9 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

tc-sam-cli (>=0.0.7, <=0.0.10) potentially affected by unknown CVE via aws-sam-cli (0.17.0)

aws-sam-cli PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli =0.0.7, =0.0.10 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

tc-sam-cli (0.0.11) potentially affected by unknown CVE via aws-sam-cli (0.22.0)

aws-sam-cli PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli 0.0.11 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

tc-sam-cli (0.0.12) potentially affected by unknown CVE via aws-sam-cli (0.37.0)

aws-sam-cli PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli 0.0.12 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

better-lambda-deploy (>=0.0.4, <=0.2.1) potentially affected by unknown CVE via aws-sam-cli (0.40.0)

aws-sam-cli PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.0.4, =0.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

better-lambda-deploy (>=0.2.2, <=0.5.9) potentially affected by unknown CVE via aws-sam-cli (0.41.0)

aws-sam-cli PYPI version 0.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.2.2, =0.5.9 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

better-lambda-deploy (>=0.7.0, <=0.8.5), localambda (0.0.1) potentially affected by unknown CVE via aws-sam-cli (>=1.12.0, <=1.38.1)

aws-sam-cli PYPI version =1.12.0, =0.7.0, =0.8.5 - localambda 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

PT-2024-40458

Name of the Vulnerable Software and Affected Versions AWS SAM CLI versions prior to 1.122.0 Description The issue concerns the exposure of sensitive data in the AWS SAM CLI output via STDERR when running the sam build command. If customers specify sensitive data in the DockerBuildArgs parameter o...

agogosml-cli (0.1.2), authentic (0.0.11) +37 more potentially affected by CVE-2022-24065 via cookiecutter (1.6.0)

cookiecutter PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on cookiecutter and may be impacted: - agogosml-cli 0.1.2 - authentic 0.0.11 - aws-sam-cli =0.17.0, =0.0.4, =0.0.2, =0.6.5, =0.4.3, =0.9.0, =0.9.0, =1.0.2 and more Source cves...