Skip to content
OpenAdvisories

Package · Ubuntu

ruby-aws-sdk

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-14762

    AWS SDK for Ruby's S3 Encryption Client has a Key Commitment Issue

    Missing cryptographic key commitment in the AWS SDK for Ruby may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadat…

    AWS AWS SDK for Ruby aws-sdk-s3 ruby-aws-sdk Ubuntu RubyGems