awslabs vulnerabilities

CVEs per yearBy the year they were published

1. 20201
2. 20213
3. 20221
4. 20234
5. 20241

Newest CVEs

• CVE-2024-37293

  aws-deployment-framework's potential risk can lead to privilege escalation

  awslabs · aws-deployment-framework

  High7.6
• CVE-2023-51386

  Sandbox Accounts for Events vulnerable to privilege escalation to read running events data

  awslabs · sandbox-accounts-for-events

  High7.8
• CVE-2023-50928

  sandbox-accounts-for-events security misconfiguration leads to budget exceed

  awslabs · sandbox-accounts-for-events

  High7.1
• CVE-2023-36467

  AWS data.all vulnerable to RCE through user injection of Python Commands

  awslabs · aws-dataall

  High8.0
• CVE-2023-30610

  AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending

  awslabs · aws-sdk-rust

  Medium5.5
• CVE-2022-39230

  Security issue in fhir-works-on-aws-authz-smart

  awslabs · fhir-works-on-aws-authz-smart

  Medium6.5
• CVE-2021-43811

  Code injection via unsafe YAML loading

  awslabs · sockeye

  High7.8
• CVE-2021-41150

  Improper sanitization of delegated role names in tough

  awslabs · tough

  High8.2
• CVE-2021-41149

  Improper sanitization of target names in tough

  awslabs · tough

  High8.2
• CVE-2020-15093

  Improper verification of signature threshold in tough

  awslabs · tough

  High8.6