Skip to content
OpenAdvisories

Package · Hex

ex_aws_sns

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7

    ex_aws_sns SigningCertURL not validated in verify_message/1

    Improper Certificate Validation vulnerability in ex-aws ex_aws_sns (ExAws.SNS, ExAws.SNS.PublicKeyCache modules) allows Signature Spoofing by Improper Validation. This vulnerability is associated with program files lib/ex_aws/sns.ex, lib/ex_aws/sns/public_key…