Skip to content
OpenAdvisories

Package · PyPI

localstack

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 7.4
    CVE-2023-48054

    Missing SSL certificate validation in localstack

    Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.

    localstack PyPI
  • Critical 9.8
    CVE-2021-32090

    Command injection in LocalStack

    The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.

    localstack PyPI
  • Medium 6.1
    CVE-2021-32091

    Cross-site scripting in LocalStack

    A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6.

    localstack PyPI