aws-key-disabler

AWS Lambda - IAM Access Key Disabler The AWS Key disabler is a Lambda Function that disables AWS IAM User Access Keys after a set amount of time in order to reduce the risk associated with old access keys. AWS Lambda Architecture SysOps Output for EndUser Developer Toolchain Current Limitations A...

warcannon

WARCannon - Catastrophically powerful parallel WARC processing WARCannon was built to simplify and cheapify the process of 'grepping the internet'. With WARCannon, you can: Build and test regex patterns against real Common Crawl data Easily load Common Crawl datasets for parallel processing Scale...

spacesiren

SpaceSiren SpaceSiren is a honey token manager and alert system for AWS. With this fully serverless application, you can create and manage honey tokens at scale -- up to 10,000 per SpaceSiren instance -- at close to no cost.1 How It Works SpaceSiren provides an API to create no-permission AWS IAM...

Medium: awscli-2

Issue Overview: Overly permissive file permissions in AWS CLI before 1.44.78 v1 and 2.34.29 v2 on Unix-like systems where the umask has not been configured to restrict file permissions the default on most systems may allow other local users on the same host to read credentials written by certain...

ROS-20260907-73-0506

The vulnerability in awscli is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to execute arbitrary commands on the operating system...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-18654 via awscli (>=1.7.34, <=1.45.23)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-18654 Source advisory: OSV:PYSEC-2026-3627...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-18654 via awscli (>=1.7.34, <=1.45.23)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-18654 Source advisory: GHSA-HQVF-45JJ-MCCQ...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-18654 via awscli (>=1.7.34, <=1.45.23)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-18654 Source advisory: OSV:GHSA-HQVF-45JJ-MCCQ...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-13769 via awscli (>=1.7.34, <=1.44.77)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-13769 Source advisory: OSV:PYSEC-2026-3548...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-18654 via awscli (>=1.7.34, <=1.45.23)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-18654 Source advisory: SNYK:PYTHON-AWSCLI-18533156...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-18654 via awscli (>=1.7.34, <=1.45.23)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-18654 Source advisory: MEND:CVE-2026-18654...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-13769 via awscli (>=1.7.34, <=1.44.77)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-13769 Source advisory: GHSA-WFP6-F47H-HXC3...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-13769 via awscli (>=1.7.34, <=1.44.77)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-13769 Source advisory: OSV:GHSA-WFP6-F47H-HXC3...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the createconfig path in awscli/customizations/codedeploy/register.py. An attacker can read the CodeDeploy on-premises configuration file by accessing it on the same Unix-like ho...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-13769 via awscli (>=1.7.34, <=1.44.77)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-13769 Source advisory: SNYK:PYTHON-AWSCLI-17796103...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +70 more potentially affected by CVE-2026-13769 via awscli (>=1.7.34, <=1.44.77)

awscli PYPI version =1.7.34, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =0.9.1, =2020.5.19, =0.3.0, =0.1.16, =0.1.18 and more Source cves: CVE-2026-13769 Source advisory: MEND:CVE-2026-13769...

ROOT-APP-PYPI-GHSA-747P-WMPV-9C78 GHSA-747p-wmpv-9c78 in rootio-awscli - Patched by Root

Root has patched GHSA-747p-wmpv-9c78 in the rootio-awscli package for Root:PyPI. Multiple fixed versions available...

aws-credential-process (0.20.0), aws-session-daemon (>=0.1.0, <=0.6.0) +2 more potentially affected by CVE-2026-40947 via yubikey-manager (>=5.0.0, <=5.1.1)

yubikey-manager PYPI version =5.0.0, =0.1.0, =1.0.0, =1.6.6 Source cves: CVE-2026-40947 Source advisory: SNYK:PYTHON-YUBIKEYMANAGER-16325204...

PT-2026-28782

Root has patched GHSA-747p-wmpv-9c78 in the rootio-awscli package for Root:PyPI. Multiple fixed versions available...

accession (>=1.9.0, <=3.11.0), aio-aws (>=0.21.0, <=0.22.1) +63 more potentially affected by unknown CVE via awscli (>=1.14.63, <=1.44.37)

awscli PYPI version =1.14.63, =1.9.0, =0.21.0, =1.0.0, =0.1.1, =0.1.0, =2.0.4, =0.1.0, =0.1.17, =1.0.1, =2020.5.19, =0.3.0, =0.1.16, =1.5.157, =1.5.160 and more Source cves: unknown CVE Source advisory: OSV:GHSA-747P-WMPV-9C78...