S3 Encryption Client for Java

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2025-14763

Amazon S3 Encryption Client for Java has a Key Commitment Issue

Missing cryptographic key commitment in the Amazon S3 Encryption Client for Java may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" ins…

AWS S3 Encryption Client for Java software.amazon.encryption.s3:amazon-s3-encryption-client-java Maven

Dec 17, 2025