Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

Overview aws-encryption-sdk is an AWS Encryption SDK implementation for Python Affected versions of this package are vulnerable to Selection of Less-Secure Algorithm During Negotiation 'Algorithm Downgrade' via the shared key cache. An attacker can bypass key commitment policy enforcement by...

cloudformation-cli-python-lib (>=2.1.12 <=2.1.16), core-aws (>=1.0.0 <=1.0.4) +3 more potentially affected by CVE-2026-6550 via aws-encryption-sdk (>=3.1.0 <=3.3.0)

aws-encryption-sdk PYPI version =3.1.0, =2.1.12, =1.0.0, =1.0.1, =0.4.8, =25.11.0, =25.14.1 Source cves: CVE-2026-6550 Source advisory: SNYK:PYTHON-AWSENCRYPTIONSDK-16115497...

CVE-2026-6550

The vulnerability CVE-2026-6550 affects the AWS Encryption SDK for Python in its caching layer. A cryptographic downgrade in the key cache could allow an authenticated local actor to bypass key commitment policy enforcement, enabling ciphertext to be decrypted into multiple possible plaintexts. A...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: argo-workflows, terraform-provider-kubernetes, istio, kargo, dynamic-localpv-provisioner, argocd-image-updater, datadog-agent, cilium-cli, kpt, k9s, kubescape, rancher, kubeflow-pipelines, teleport, headlamp, eksctl, kubevela, trivy-operator,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: argo-workflows, terraform-provider-kubernetes, istio, kargo, dynamic-localpv-provisioner, argocd-image-updater, datadog-agent, cilium-cli, kpt, k9s, kubescape, rancher, kubeflow-pipelines, teleport, headlamp, eksctl, kubevela, trivy-operator,...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: zarf-fips, gitlab-kas-fips, percona-server-mongodb-operator, argo-workflows, hubble-fips, terraform-provider-kubernetes-fips, kubescape-server, dynamic-localpv-provisioner-fips, linkerd2, redis-operator-fips, infinispan-operator, gitlab-runner, vcluster, headlamp-fip...

CVE-2026-6437

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

CVE-2026-6437

CVE-2026-6437 concerns the AWS EFS CSI Driver (aws-efs-csi-driver) prior to v3.0.1. The flaw is improper neutralization of argument delimiters in the volume handling component, which allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via...

CVE-2026-6437 AWS EFS CSI Driver Mount Option Injection

Improper neutralization of argument delimiters in the volume handling component in AWS EFS CSI Driver aws-efs-csi-driver before v3.0.1 allows remote authenticated users with PersistentVolume creation permissions to inject arbitrary mount options via comma injection. To remediate this issue, users...

Amazon Linux 2 : amazon-efs-utils, --advisory ALAS2-2026-3245 (ALAS-2026-3245)

The version of amazon-efs-utils installed on the remote host is prior to 3.0.0-4. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3245 advisory. time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided t...

Amazon Linux 2023 : amazon-efs-utils (ALAS2023-2026-1564)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1564 advisory. time provides date and time handling in Rust. From 0.3.6 to before 0.3.47, when user-provided input is provided to any type that parses with the RFC 2822 format, a denial of service attack via...

Exploit for Server-Side Request Forgery in Vercel Next.Js

CVE-2024-34351 Demo Minimal Next.js 14.0.0 application for de...

EUVD-2026-21656

aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of aws-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handlin...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: nfs-subdir-external-provisioner, dgraph, malcontent, nodetaint, osv-scanner, grafana-rollout-operator, actions-runner-controller, flux-image-automation-controller, karpenter, nova, dbmate, envoy-ratelimit, gh, tailscale, newrelic-infra-operator,...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: nerdctl, aws-flb-cloudwatch, zot, kube-fluentd-operator, istio, gitlab-pages, dask-gateway, kubescape, datadog-agent, cilium-cli, falco-no-driver, karpenter, gitaly, newrelic-fluent-bit-output, redka, libnvidia-container, telegraf, kine, fuse-overlayfs-snapshotter,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: nats, nri-mysql, nova, kor, libnvidia-container, fuse-overlayfs-snapshotter, aws-nuke, opencost, crossplane-provider-azure-storage, grpc-health-probe, external-secrets-operator, external-dns, apache-exporter, terraform-provider-azapi, db-operator, falcoctl,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: nats, nri-mysql, nova, kor, libnvidia-container, fuse-overlayfs-snapshotter, aws-nuke, opencost, crossplane-provider-azure-storage, grpc-health-probe, external-secrets-operator, external-dns, apache-exporter, terraform-provider-azapi, db-operator, falcoctl,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, flannel, dask-gateway, bento, datadog-agent, cloud-sql-proxy, aws-efs-csi-driver, dbmate, libnvidia-container, amazon-cloudwatch-agent-operator, fuse-overlayfs-snapshotter, terraform-provider-azuread, trivy-operator, newrelic-infrastructure-agent,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: aws-flb-cloudwatch, flannel, dask-gateway, bento, datadog-agent, cloud-sql-proxy, aws-efs-csi-driver, dbmate, libnvidia-container, amazon-cloudwatch-agent-operator, fuse-overlayfs-snapshotter, terraform-provider-azuread, trivy-operator, newrelic-infrastructure-agent,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: nats, nri-mysql, nova, kor, libnvidia-container, fuse-overlayfs-snapshotter, aws-nuke, opencost, crossplane-provider-azure-storage, grpc-health-probe, external-secrets-operator, external-dns, apache-exporter, terraform-provider-azapi, db-operator, falcoctl,...