Package · Maven

com.amazonaws:aws-encryption-sdk-java

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 5.3

CVE-2024-23680

AWS Encryption SDK for Java Improper Verification of Cryptographic Signature

AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.

com.amazonaws:aws-encryption-sdk-java Maven

Jan 19, 2024
Medium 4.8

CVE-2020-8897

Robustness weakness in AWS KMS and Encryption SDKs

A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2.0.0. Due to the non-committing property of AES-GCM (and other AEAD ciphers such as AES-GCM-SIV or (X)ChaCha20Poly1305) used by the SDKs to…

amazon AWS SDK aws-encryption-sdk com.amazonaws:aws-encryption-sdk-java Maven PyPI

Nov 16, 2020