Skip to content
OpenAdvisories
Critical · 9.8 CVE-2021-32090 EUVD-2021-0113GHSA-hpr6-f4vq-mxchPYSEC-2021-101

Command injection in LocalStack

Published May 7, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Package: localstack Ecosystem: PyPI

Description

The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI localstack < 0.12.10 0.12.10 GHSA-hpr6-f4vq-mxch
PyPI localstack < 0.12.6.1 0.12.6.1 PYSEC-2021-101

References