AWS Security Bulletins -

AWS Security Bulletins

Issue with AWS SAM CLI (CVE-2025-3047, CVE-2025-3048)
Source: AWS Security Bulletins Published on 2025-03-31
Issue with tough, versions prior to 0.20.0 (Multiple CVEs)
Source: AWS Security Bulletins Published on 2025-03-27
Issues with Kubernetes ingress-nginx controller (Multiple CVEs)
Source: AWS Security Bulletins Published on 2025-03-24
Issue with the AWS CDK CLI and custom credential plugins (CVE-2025-2598)
Source: AWS Security Bulletins Published on 2025-03-21
Issue with Temporary elevated access management (TEAM) - CVE-2025-1969
Source: AWS Security Bulletins Published on 2025-03-04
Path traversal issue in Deep Java Library - (CVE-2025-0851)
Source: AWS Security Bulletins Published on 2025-01-29
Issue with AWS Sign-in IAM User Login Flow – Possible Username Enumeration (CVE-2025-0693)
Source: AWS Security Bulletins Published on 2025-01-23
Issue with Amazon WorkSpaces, Amazon AppStream 2.0, and Amazon DCV (CVE-2025-0500 and CVE-2025-0501)
Source: AWS Security Bulletins Published on 2025-01-15
Issue with RedShift JDBC Driver, Python Connector and ODBC Driver - (CVE-2024-12744, CVE-2024-12745, CVE-2024-12746)
Source: AWS Security Bulletins Published on 2024-12-24
Issue with DynamoDB local - CVE-2022-1471
Source: AWS Security Bulletins Published on 2024-12-11
Issue with data.all (Multiple CVEs)
Source: AWS Security Bulletins Published on 2024-11-09
CVE-2024-8901 - missing JWT issuer and signer validation in aws-alb-route-directive-adapter-for-istio
Source: AWS Security Bulletins Published on 2024-10-21
CVE-2024-10125 - missing JWT issuer and signer validation in aws-alb-identity-aspnetcore
Source: AWS Security Bulletins Published on 2024-10-21
Issue with NVIDIA Container Toolkit (CVE-2024-0132, CVE-2024-0133)
Source: AWS Security Bulletins Published on 2024-10-02
Issue with AWS Client VPN - CVE-2024-30164, CVE-2024-30165
Source: AWS Security Bulletins Published on 2024-07-22