Skip to content
OpenAdvisories

Product · AWS

AWS SDK for PHP

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2025-14761

    AWS SDK for PHP's S3 Encryption Client has a Key Commitment Issue

    Missing cryptographic key commitment in the AWS SDK for PHP may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata…

    AWS AWS SDK for PHP aws/aws-sdk-php aws-sdk-for-php Ubuntu Packagist