CVE-2025-3047

When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...

CVE-2025-3047 Path Traversal in AWS SAM CLI allows file copy to build container

When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...

better-lambda-deploy (>=0.0.4, <=0.8.5), localambda (0.0.1) +1 more potentially affected by CVE-2025-3047 via aws-sam-cli (>=0.17.0, <=1.38.1)

aws-sam-cli PYPI version =0.17.0, =0.0.4, =0.0.7, =0.0.12 Source cves: CVE-2025-3047 Source advisory: MEND:CVE-2025-3047...

CVE-2025-3047 Path Traversal in AWS SAM CLI allows file copy to build container

When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...

PT-2025-13790

Name of the Vulnerable Software and Affected Versions AWS Serverless Application Model Command Line Interface SAM CLI versions prior to 1.133.0 Description The issue arises when the SAM CLI build process is run with Docker and symlinks are included in the build files. This allows a user to access...

AWS SAM CLI security vulnerabilities

AWS SAM CLI is an Amazon Web Services open source CLI tool for building, testing, debugging, and deploying serverless applications using AWS SAM. A security vulnerability exists in AWS SAM CLI that stems from the possibility that symbolic link content could be copied to the local workspace cache...

PT-2025-13791

Name of the Vulnerable Software and Affected Versions AWS Serverless Application Model Command Line Interface SAM CLI versions prior to 1.134.0 Description The issue arises when a build is completed with AWS Serverless Application Model Command Line Interface SAM CLI that includes symlinks. The...

CVE-2025-3048: UNIX Symbolic Link (Symlink) Following

After completing a build with AWS Serverless Application Model Command Line Interface SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outsid...

CVE-2025-3047: UNIX Symbolic Link (Symlink) Following

When running the AWS Serverless Application Model Command Line Interface SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A use...

Argument Injection

aws-sam-cli is vulnerable to Argument Injection. The vulnerability is due to the ability for users to specify arguments in the SAM template that are passed to the Docker engine during the build, potentially leading to malicious code execution...

better-lambda-deploy (>=0.7.0, <=0.8.5), localambda (0.0.1) potentially affected by unknown CVE via aws-sam-cli (>=1.12.0, <=1.38.1)

aws-sam-cli PYPI version =1.12.0, =0.7.0, =0.8.5 - localambda 0.0.1 Source cves: unknown CVE Source advisory: GHSA-RJC6-VM4H-85CG...

Sensitive Information Exposure Through Insecure Logging For Secrets Like Metadata.DockerBuildArgs

Summary The AWS Serverless Application Model SAM CLI is an open source tool that allows customers to build, deploy and test their serverless applications built on AWS. AWS SAM CLI can build container Docker images and customers can specify arguments in the SAM template that are passed to the Dock...

GHSA-RJC6-VM4H-85CG Sensitive Information Exposure Through Insecure Logging For Secrets Like Metadata.DockerBuildArgs

Summary The AWS Serverless Application Model SAM CLI is an open source tool that allows customers to build, deploy and test their serverless applications built on AWS. AWS SAM CLI can build container Docker images and customers can specify arguments in the SAM template that are passed to the Dock...

better-lambda-deploy (>=0.6.0, <=0.6.9) potentially affected by unknown CVE via aws-sam-cli (0.53.0)

aws-sam-cli PYPI version 0.53.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.6.0, =0.6.9 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

tc-sam-cli (>=0.0.7, <=0.0.10) potentially affected by unknown CVE via aws-sam-cli (0.17.0)

aws-sam-cli PYPI version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli =0.0.7, =0.0.10 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

tc-sam-cli (0.0.11) potentially affected by unknown CVE via aws-sam-cli (0.22.0)

aws-sam-cli PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli 0.0.11 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

tc-sam-cli (0.0.12) potentially affected by unknown CVE via aws-sam-cli (0.37.0)

aws-sam-cli PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - tc-sam-cli 0.0.12 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

better-lambda-deploy (>=0.0.4, <=0.2.1) potentially affected by unknown CVE via aws-sam-cli (0.40.0)

aws-sam-cli PYPI version 0.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.0.4, =0.2.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

better-lambda-deploy (>=0.2.2, <=0.5.9) potentially affected by unknown CVE via aws-sam-cli (0.41.0)

aws-sam-cli PYPI version 0.41.0 is affected by a known vulnerability. The following packages have a transitive dependency on aws-sam-cli and may be impacted: - better-lambda-deploy =0.2.2, =0.5.9 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...

better-lambda-deploy (>=0.7.0, <=0.8.5), localambda (0.0.1) potentially affected by unknown CVE via aws-sam-cli (>=1.12.0, <=1.38.1)

aws-sam-cli PYPI version =1.12.0, =0.7.0, =0.8.5 - localambda 0.0.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RJC6-VM4H-85CG...