github.com/aws/amazon-s3-encryption-client-go

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2025-14764

Amazon S3 Encryption Client has a Key Commitment Issue

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Go may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" inste…

AWS S3 Encryption Client for Go github.com/aws/amazon-s3-encryption-client-go github.com/aws/amazon-s3-encryption-client-go/v3 Go

Dec 17, 2025