Skip to content
OpenAdvisories

Package · Go

github.com/aws/aws-sdk-go

3 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 2.5

    In-band key negotiation issue in AWS S3 Crypto SDK for GoLang

    A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attacker with write access to the targeted bucket can change the encryption algorithm of an object in the bucket, which can then allow them to c…