com.limemojito.oss.spring-boot:aws-utilities (>=11.0.0 <=12.0.7), com.limemojito.oss.standards:aws-utilities (>=13.0.0 <=14.1.0) +8 more potentially affected by CVE-2026-44308 via io.awspring.cloud:spring-cloud-aws-sns (>=3.0.0 <=3.4.2)

🗓️ 07 May 2026 00:06:52Reported by Vulners OSVType

vulnersosv

vulnersosv🔗 osv.dev👁 7 Views

Several libraries depend on io.awspring.cloud:spring-cloud-aws-sns and are affected by Vulnerability 2026 44308.

Reporter	Title	Published	Views	Family All 18
ATTACKERKB	CVE-2026-44308	14 May 202614:39	–	attackerkb
CNNVD	Spring Cloud AWS 数据伪造问题漏洞	14 May 202600:00	–	cnnvd
CVE	CVE-2026-44308	14 May 202614:39	–	cve
Cvelist	CVE-2026-44308 Spring Cloud AWS: Missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications	14 May 202614:39	–	cvelist
EUVD	EUVD-2026-30302	14 May 202614:39	–	euvd
Github Security Blog	Spring Cloud AWS missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications	7 May 202600:06	–	github
NVD	CVE-2026-44308	14 May 202615:16	–	nvd
OSV	CVE-2026-44308 Spring Cloud AWS: Missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications	14 May 202614:39	–	osv
OSV	GHSA-R4W4-WV68-QV85 Spring Cloud AWS missing SNS message signature verification allows spoofing of HTTP/HTTPS endpoint notifications	7 May 202600:06	–	osv
OSV	ROOT-APP-MAVEN-CVE-2026-44308 CVE-2026-44308 in io.root.io.awspring.cloud:spring-cloud-aws-sns - Patched by Root	24 Jun 202609:24	–	osv

14 May 2026 21:05Current

5.8Medium risk

Vulners AI Score5.8

CVSS 46.3

EPSS0.00179

SSVC

Spring Cloud SNS Vulnerability 2026 44308 Aws utilities Transitive dependencies Sns modules