CVE-2026-104002

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-104002
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-104002.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-104002
Aliases
  • GHSA-3vxg-4xv2-jfh5
Published
2026-10-01T21:05:55Z
Modified
2026-10-03T03:46:56Z
Severity
  • 6.0 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N CVSS Calculator
Summary
Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)
Details

A fail-open error handling issue within the data masking utility of Powertools for AWS Lambda (Python) might allow actors to read sensitive field values that the application intended to mask. 

To remediate this issue, users should upgrade to version 3.35.0.

Database specific 
{
    "cna_assigner":  "AMZN",
    "cwe_ids":  [
        "CWE-390"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/104xxx/CVE-2026-104002.json"
}
References

Affected packages

Git / github.com/aws-powertools/powertools-lambda-python

Affected ranges

Type
GIT
Repo
https://github.com/aws-powertools/powertools-lambda-python
Events
Introduced
c5ccfc9cda76d4d30f53c490ba5288f32137e24c
Fixed
4770746a8a46ecbd89aa8e09363662983937919b
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "3.6.0"
        },
        {
            "last_affected":  "3.34.0"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-104002.json"