Skip to content
OpenAdvisories

Package · PyPI

aws-encryption-sdk-cli

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium —
    GHSA-89v2-g37m-g3ff

    Improper Verification of Cryptographic Signature in aws-encryption-sdk-cli

    ### Impact This advisory addresses several LOW severity issues with streaming signed messages and restricting processing of certain types of invalid messages. This ESDK supports a streaming mode where callers may stream the plaintext of signed messages before…

    aws-encryption-sdk-cli PyPI
  • Low —
    GHSA-2xwp-m7mq-7q3r

    CLI does not correctly implement strict mode

    In the affected versions, the AWS Encryption CLI operated in "discovery mode" even when "strict mode" was specified. Although decryption only succeeded if the user had permission to decrypt with at least one of the CMKs, decryption could be successful using a…

    aws-encryption-sdk-cli PyPI