Known Vulnerabilities for Aws S3 Crypto Sdk by Amazon
Listed below are 2 of the newest known vulnerabilities associated with "Aws S3 Crypto Sdk" by "Amazon".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-123867 json | A per-host mutual-TLS authorization bypass in Node.js lets a client authorized for the default hostname reach a protected hos... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-119236 json | An mvfst QUIC server retained CRYPTO frame data received at an encryption level (Initial or Handshake) that the TLS handshake... | Not Provided | 2026-11-11 | 2026-11-11 |
| CVE-2026-116641 json | The DB Tools rely on the TLS implementation in Golang’s standard library, which generally uses the system CA store. However... | Not Provided | 2026-10-28 | 2026-10-29 |
| CVE-2026-116587 json | Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support ... | Not Provided | 2026-10-26 | 2026-10-27 |
| CVE-2026-115928 json | FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a sof... | Not Provided | 2026-11-05 | 2026-11-09 |
| CVE-2026-111943 json | On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may n... | Not Provided | 2026-10-21 | 2026-10-30 |
| CVE-2026-109425 json | Tink-go (tink-crypto/tink-go) through 2.8.0 contains an input-validation vulnerability where keyset.NewHandleWithNoSecrets() ... | Not Provided | 2026-10-12 | 2026-10-14 |
| CVE-2026-109399 json | SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c ... | Not Provided | 2026-10-12 | 2026-10-18 |
| CVE-2026-108267 json | Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.... | Not Provided | 2026-10-09 | 2026-10-13 |
| CVE-2026-107724 json | fast-jwt provides fast JSON Web Token (JWT) implementation. In 6.2.4, fast-jwt can classify raw serialized public JWK or JWKS... | Not Provided | 2026-10-08 | 2026-10-09 |