awslabs
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| tough | 3 | – | Oct 19, 2021 |
| sandbox-accounts-for-events | 2 | – | Dec 22, 2023 |
| aws-sdk-rust | 1 | – | Apr 19, 2023 |
| aws-dataall | 1 | – | Jun 28, 2023 |
| sockeye | 1 | – | Dec 8, 2021 |
| fhir-works-on-aws-authz-smart | 1 | – | Sep 23, 2022 |
| aws-deployment-framework | 1 | – | Jun 11, 2024 |
Exploited and recent CVEs
- CVE-2024-37293 aws-deployment-framework's potential risk can lead to privilege escalation 0.2%
- CVE-2023-51386 Sandbox Accounts for Events vulnerable to privilege escalation to read running events data 0.2%
- CVE-2023-50928 sandbox-accounts-for-events security misconfiguration leads to budget exceed 0.4%
- CVE-2023-36467 AWS data.all vulnerable to RCE through user injection of Python Commands 1.2%
- CVE-2023-30610 AWS SDK for Rust will log AWS credentials when TRACE-level logging is enabled for request sending 0.2%
- CVE-2022-39230 Security issue in fhir-works-on-aws-authz-smart 0.7%
- CVE-2021-43811 Code injection via unsafe YAML loading 2.5%
- CVE-2021-41150 Improper sanitization of delegated role names in tough 1.3%
- CVE-2021-41149 Improper sanitization of target names in tough 1.1%
- CVE-2020-15093 Improper verification of signature threshold in tough 1.4%