Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-78379 |
|
Vulnerability in Amazon aws (CVE-2026-78379)
vulnerability in Amazon aws (CVE-2026-78379). Successful exploitation can lead to full system takeover.
|
| CVE-2026-16796 |
|
Vulnerability in Amazon bedrock-agentcore (CVE-2026-16796)
vulnerability in Amazon bedrock-agentcore (CVE-2026-16796). Confidential information can be exposed externally. Mitigation: upgrade to `1.18.1` or later.
|
| CVE-2026-15737 |
|
Vulnerability in Amazon aws (CVE-2026-15737)
vulnerability in Amazon aws (CVE-2026-15737). Confidential information can be exposed externally.
|
| CVE-2026-15746 |
|
SSRF (Server-Side Request Forgery) in Amazon aws (CVE-2026-15746)
SSRF in Amazon aws (CVE-2026-15746). Confidential information can be exposed externally. Exploitable via `Authorization header`.
|
| CVE-2026-12530 |
|
Vulnerability in Amazon bedrock-agentcore (CVE-2026-12530)
vulnerability in Amazon bedrock-agentcore (CVE-2026-12530). Confidential information can be exposed externally. Mitigation: upgrade to `1.6.1` or later.
|
| CVE-2026-11393 |
|
Code Injection in Amazon @aws/agentcore (CVE-2026-11393)
code injection in Amazon @aws/agentcore (CVE-2026-11393). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.0.0-preview.9` or later.
|
| CVE-2026-8838 |
|
Code Injection in Amazon redshift-connector (CVE-2026-8838)
code injection in Amazon redshift-connector (CVE-2026-8838). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.1.14` or later.
|
| CVE-2026-8596 |
|
Vulnerability in Amazon sagemaker (CVE-2026-8596)
vulnerability in Amazon sagemaker (CVE-2026-8596). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.8.0` or later.
|