Aws Encryption Sdk (Amazon) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 28 known versions, newest CVE from 2024-01-19. Vendor: Amazon.

CVEs of Aws Encryption Sdk

• CVE-2024-23680 - CVSS 5.3 (medium), 2024-01-19: AWS Encryption SDK for Java versions 2.0.0 to 2.2.0 and less than 1.9.0 incorrectly validates some invalid ECDSA signatures.
• CVE-2020-8897 - CVSS 8.1 (high), 2020-11-16: A weak robustness vulnerability exists in the AWS Encryption SDKs for Java, Python, C and Javalcript prior to versions 2.0.0. Due to the non-committing…