Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2387
  • PyPI/aws-encryption-sdk
 AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache 13 Jul
  • Fix available
  • Severity - 5.7 (Medium)
GHSA-v638-38fc-rhfv
  • PyPI/aws-encryption-sdk
 AWS Encryption SDK for Python: Key commitment policy bypass via shared key cache 24 Apr
  • Fix available
  • Severity - 5.7 (Medium)
GHSA-wqgp-vphw-hphf
  • Maven/com.amazonaws:aws-encryption-sdk-java
  • PyPI/aws-encryption-sdk
 Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness 12 Oct 2021
  • Fix available
  • Severity - 8.6 (High)
GHSA-89v2-g37m-g3ff
  • PyPI/aws-encryption-sdk-cli
 Improper Verification of Cryptographic Signature in aws-encryption-sdk-cli 01 Jun 2021
  • Fix available
GHSA-x5h4-9gqw-942j
  • PyPI/aws-encryption-sdk
 Improper Verification of Cryptographic Signature in aws-encryption-sdk 01 Jun 2021
  • Fix available
PYSEC-2020-261
  • PyPI/aws-encryption-sdk
 See record for full details 16 Nov 2020
  • Fix available
GHSA-2xwp-m7mq-7q3r
  • PyPI/aws-encryption-sdk-cli
 CLI does not correctly implement strict mode 28 Oct 2020
  • Fix available