Description
Missing SSL certificate validation in localstack v2.3.2 allows attackers to eavesdrop on communications between the host and server via a man-in-the-middle attack.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | localstack | <= 3.0.0 | — | GHSA-8633-g3ph-97rp |
| PyPI | localstack | all versions | — | PYSEC-2023-243 |