Skip to content
OpenAdvisories

Package · Ubuntu

aws-sdk-for-php

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-14761

    AWS SDK for PHP's S3 Encryption Client has a Key Commitment Issue

    Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata…

    AWS AWS SDK for PHP aws/aws-sdk-php aws-sdk-for-php Ubuntu Packagist
  • Medium 6.0
    CVE-2023-51651

    Potential URI resolution path traversal in the AWS SDK for PHP

    AWS SDK for PHP is the Amazon Web Services software development kit for PHP. Within the scope of requests to S3 object keys and/or prefixes containing a Unix double-dot, a URI path traversal is possible. The issue exists in the `buildEndpoint` method in the R…

    AWS aws-sdk-php aws/aws-sdk-php aws-sdk-for-php Ubuntu Packagist Go