6510 matches found
CVE-2026-18481
CVE-2026-18481 describes a stored cross-site scripting flaw in the AWS Ops Wheel project, affecting the participant_url handling. The issue, triggered by a crafted participant_url value with a dangerous URI scheme, could allow an authenticated remote user to steal session tokens and escalate to f...
CVE-2026-18481 Stored XSS in Participant URL Field leads to Account Takeover via Session Token Theft
Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR 168 might allow an authenticated remote user to steal session tokens and escalate to full administrative control of the deployed instance via a crafted participanturl value containing a dangerous URI scheme. To...
CVE-2026-18481: Improper Neutralization of Input During Web Page Generation
Stored cross-site scripting in the participant URL handling in AWS Ops Wheel before PR 168 might allow an authenticated remote user to steal session tokens and escalate to full administrative control of the deployed instance via a crafted participanturl value containing a dangerous URI scheme. To...
EUVD-2025-13500
AWS Amplify Studio UI Component Properties Has an Input Validation Issue...
CVE-2026-18140
Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service process abort via stack exhaustion via...
CVE-2026-18140
Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service process abort via stack exhaustion via...
CVE-2026-18140 Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers
Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service process abort via stack exhaustion via...
CVE-2026-18140 Uncontrolled recursion in the aws-smithy-json unknown-key skip path allows unauthenticated remote denial of service in smithy-rs generated servers
Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause a denial of service process abort via stack exhaustion via...
CLEANSTART-2026-EG54450 Security fixes in crossplane-provider-aws 2.3.0-r0
Package crossplane-provider-aws version 2.3.0-r0 fixes 5 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61731, CVE-2025-68119, CVE-2025-61730...
CLEANSTART-2026-ZU68768 Security fixes in aws-network-policy-agent 1.3.2-r1
Package aws-network-policy-agent version 1.3.2-r1 fixes 21 vulnerabilities: CVE-2026-25681, CVE-2026-27136, CVE-2026-33814, CVE-2026-39821, CVE-2026-25680...
CLEANSTART-2026-IQ62750 Security fixes in velero-plugin-for-aws 1.12.2-r4
Package velero-plugin-for-aws version 1.12.2-r4 fixes 8 vulnerabilities: ghsa-xmrv-pmrh-hhx2, CVE-2026-33810, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282...
CLEANSTART-2026-PY52453 Security fixes in velero-plugin-for-aws 1.13.1-r0
Package velero-plugin-for-aws version 1.13.1-r0 fixes 1 vulnerabilities: CVE-2025-61729...
CLEANSTART-2026-DP84010 Security fixes in velero-plugin-for-aws 1.12.2-r6
Package velero-plugin-for-aws version 1.12.2-r6 fixes 12 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...
CLEANSTART-2026-GY32533 Security fixes in velero-plugin-for-aws 1.13.0-r0
Package velero-plugin-for-aws version 1.13.0-r0 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...
CLEANSTART-2026-QS96651 Security fixes in cloud-provider-aws-1.34 1.34.1-r1
Package cloud-provider-aws-1.34 version 1.34.1-r1 fixes 2 vulnerabilities: ghsa-f6x5-jh6r-wnfv, ghsa-j5w8-q4qc-rx2x...
CLEANSTART-2026-MD27911 Security fixes in aws-cli 2.35.9-r1
Package aws-cli version 2.35.9-r1 fixes 2 vulnerabilities: CVE-2026-45186, CVE-2026-41080...
CLEANSTART-2026-GF88325 Security fixes in velero-plugin-for-aws 1.10.1-r1
Package velero-plugin-for-aws version 1.10.1-r1 fixes 9 vulnerabilities: CVE-2025-68121, CVE-2026-25679, CVE-2025-61726, CVE-2025-61728, CVE-2026-27142...
CLEANSTART-2026-RB88310 Security fixes in aws-eks-pod-identity-agent 0.1.36-r0
Package aws-eks-pod-identity-agent version 0.1.36-r0 fixes 33 vulnerabilities: CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61731, CVE-2025-61732...
CLEANSTART-2026-DJ44755 Security fixes in aws-privateca-issuer-fips 1.7.0-r1
Package aws-privateca-issuer-fips version 1.7.0-r1 fixes 23 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2026-42499, CVE-2026-33814, CVE-2026-27143...
CLEANSTART-2026-LR68332 Security fixes in velero-plugin-for-aws 1.13.2-r2
Package velero-plugin-for-aws version 1.13.2-r2 fixes 5 vulnerabilities: CVE-2026-56852, CVE-2026-39822, CVE-2026-42505, ghsa-xmrv-pmrh-hhx2, CVE-2026-33186...